summaryrefslogtreecommitdiffstats
path: root/net/netfilter
diff options
context:
space:
mode:
authorDavid S. Miller <davem@davemloft.net>2021-11-03 11:09:21 +0000
committerDavid S. Miller <davem@davemloft.net>2021-11-03 11:09:21 +0000
commit2bd080b0961d776f90e7b1ef9788c56da3638c73 (patch)
tree8340d44e4090a192e8ce269bcf7cfa759425501c /net/netfilter
parent843c3cbbdf89e8a2801363c3837f43557568d08f (diff)
parente7310c94024cdf099c0d29e6903dd6fe9205bb60 (diff)
downloadlinux-2bd080b0961d776f90e7b1ef9788c56da3638c73.tar.bz2
Merge branch 'sctp-=security-hook-fixes'
Xin Long says: ==================== security: fixups for the security hooks in sctp There are a couple of problems in the currect security hooks in sctp: 1. The hooks incorrectly treat sctp_endpoint in SCTP as request_sock in TCP, while it's in fact no more than an extension of the sock, and represents the local host. It is created when sock is created, not when a conn request comes. sctp_association is actually the correct one to represent the connection, and created when a conn request arrives. 2. security_sctp_assoc_request() hook should also be called in processing COOKIE ECHO, as that's the place where the real assoc is created and used in the future. The problems above may cause accept sk, peeloff sk or client sk having the incorrect security labels. So this patchset is to change some hooks and pass asoc into them and save these secids into asoc, as well as add the missing sctp_assoc_request hook into the COOKIE ECHO processing. v1->v2: - See each patch, and thanks the help from Ondrej, Paul and Richard. ==================== Signed-off-by: David S. Miller <davem@davemloft.net>
Diffstat (limited to 'net/netfilter')
0 files changed, 0 insertions, 0 deletions