Messages in this thread | | | Date | Thu, 09 Apr 2015 15:10:07 +0200 | From | Nicolas Dichtel <> | Subject | Re: [PATCH net-next 2/5] selinux/nlmsg: add RTM_GETNSID |
| |
Le 09/04/2015 13:10, Paul Moore a écrit : [snip] >> --- a/security/selinux/nlmsgtab.c >> +++ b/security/selinux/nlmsgtab.c >> @@ -74,6 +74,7 @@ static struct nlmsg_perm nlmsg_route_perms[] = >> { RTM_DELMDB, NETLINK_ROUTE_SOCKET__NLMSG_WRITE }, >> { RTM_GETMDB, NETLINK_ROUTE_SOCKET__NLMSG_READ }, >> { RTM_NEWNSID, NETLINK_ROUTE_SOCKET__NLMSG_WRITE }, >> + { RTM_DELNSID, NETLINK_ROUTE_SOCKET__NLMSG_READ }, >> { RTM_GETNSID, NETLINK_ROUTE_SOCKET__NLMSG_READ }, >> }; > > Can you elaborate a bit on the RTM_DELNSID type? Based only on the > name I wonder if it should be treated as a "write" and not a "read" > operation. The user is not allowed to delete a nsid (no method is implemented). This RTM_DELNSID is only used for notifications.
| |