]> www.infradead.org Git - users/jedix/linux-maple.git/commit
selinux: add netlink nlmsg_type audit message
authorThiƩbaud Weksteen <tweek@google.com>
Thu, 5 Dec 2024 01:21:00 +0000 (12:21 +1100)
committerPaul Moore <paul@paul-moore.com>
Mon, 16 Dec 2024 00:33:07 +0000 (19:33 -0500)
commit2ef6fc99e0d922a54073e7b6d6465c62f4d3b62b
tree00c624dab350d9cf22772ea712341bc448cf3a3c
parent4aa176193475d37441cc52b84088542f3a59899a
selinux: add netlink nlmsg_type audit message

Add a new audit message type to capture nlmsg-related information. This
is similar to LSM_AUDIT_DATA_IOCTL_OP which was added for the other
SELinux extended permission (ioctl).

Adding a new type is preferred to adding to the existing
lsm_network_audit structure which contains irrelevant information for
the netlink sockets (i.e., dport, sport).

Signed-off-by: ThiƩbaud Weksteen <tweek@google.com>
[PM: change "nlnk-msgtype" to "nl-msgtype" as discussed]
Signed-off-by: Paul Moore <paul@paul-moore.com>
include/linux/lsm_audit.h
security/lsm_audit.c
security/selinux/hooks.c