diff options
| author | bauen1 <[email protected]> | 2020-10-09 12:47:11 +0000 |
|---|---|---|
| committer | Paul Moore <[email protected]> | 2020-10-28 02:21:11 +0000 |
| commit | 44141f58e14317853698f994ca5c3785a0c230d0 (patch) | |
| tree | ea3b09c6ede9b129ddfa82c9438d1cd2fc756c10 /net/ipv6/tcp_ipv6.c | |
| parent | selinux: fix error initialization in inode_doinit_with_dentry() (diff) | |
| download | kernel-44141f58e14317853698f994ca5c3785a0c230d0.tar.gz kernel-44141f58e14317853698f994ca5c3785a0c230d0.zip | |
selinux: allow dontauditx and auditallowx rules to take effect without allowx
This allows for dontauditing very specific ioctls e.g. TCGETS without
dontauditing every ioctl or granting additional permissions.
Now either an allowx, dontauditx or auditallowx rules enables checking
for extended permissions.
Signed-off-by: Jonathan Hettwer <[email protected]>
Signed-off-by: Paul Moore <[email protected]>
Diffstat (limited to 'net/ipv6/tcp_ipv6.c')
0 files changed, 0 insertions, 0 deletions