selinux: Assign proper class to PF_UNIX/SOCK_RAW sockets

atlaua · pcmoore · commit 2a764b529ae5 · 2017-07-25T15:13:41.000-04:00
For PF_UNIX, SOCK_RAW is synonymous with SOCK_DGRAM (cf.
net/unix/af_unix.c). This is a tad obscure, but libpcap uses it.

Signed-off-by: Luis Ressel &lt;aranea@aixah.de&gt;
Acked-by: Stephen Smalley &lt;sds@tycho.nsa.gov&gt;
Signed-off-by: Paul Moore &lt;paul@paul-moore.com&gt;
diff --git a/security/selinux/hooks.c b/security/selinux/hooks.c
@@ -1303,6 +1303,7 @@ static inline u16 socket_type_to_security_class(int family, int type, int protoc
 		case SOCK_SEQPACKET:
 			return SECCLASS_UNIX_STREAM_SOCKET;
 		case SOCK_DGRAM:
+		case SOCK_RAW:
 			return SECCLASS_UNIX_DGRAM_SOCKET;
 		}
 		break;

Original file line number	Diff line number	Diff line change
`@@ -1303,6 +1303,7 @@ static inline u16 socket_type_to_security_class(int family, int type, int protoc`
`1303`	`1303`	`case SOCK_SEQPACKET:`
`1304`	`1304`	`return SECCLASS_UNIX_STREAM_SOCKET;`
`1305`	`1305`	`case SOCK_DGRAM:`
	`1306`	`+ case SOCK_RAW:`
`1306`	`1307`	`return SECCLASS_UNIX_DGRAM_SOCKET;`
`1307`	`1308`	`}`
`1308`	`1309`	`break;`