Messages in this thread | | | Date | Thu, 9 Apr 2015 16:47:54 -0400 | Subject | Re: [PATCH net-next 2/5] selinux/nlmsg: add RTM_GETNSID | From | Paul Moore <> |
| |
On Thu, Apr 9, 2015 at 9:10 AM, Nicolas Dichtel <nicolas.dichtel@6wind.com> wrote: > Le 09/04/2015 13:10, Paul Moore a écrit : > [snip] >>> >>> --- a/security/selinux/nlmsgtab.c >>> +++ b/security/selinux/nlmsgtab.c >>> @@ -74,6 +74,7 @@ static struct nlmsg_perm nlmsg_route_perms[] = >>> { RTM_DELMDB, NETLINK_ROUTE_SOCKET__NLMSG_WRITE }, >>> { RTM_GETMDB, NETLINK_ROUTE_SOCKET__NLMSG_READ }, >>> { RTM_NEWNSID, NETLINK_ROUTE_SOCKET__NLMSG_WRITE }, >>> + { RTM_DELNSID, NETLINK_ROUTE_SOCKET__NLMSG_READ }, >>> { RTM_GETNSID, NETLINK_ROUTE_SOCKET__NLMSG_READ }, >>> }; >> >> >> Can you elaborate a bit on the RTM_DELNSID type? Based only on the >> name I wonder if it should be treated as a "write" and not a "read" >> operation. > > The user is not allowed to delete a nsid (no method is implemented). This > RTM_DELNSID is only used for notifications.
Okay, thanks for clearing that up.
-- paul moore www.paul-moore.com
| |