On Thu, Apr 9, 2015 at 9:10 AM, Nicolas Dichtel <[email protected]> wrote: > Le 09/04/2015 13:10, Paul Moore a écrit : > [snip] >>> >>> --- a/security/selinux/nlmsgtab.c >>> +++ b/security/selinux/nlmsgtab.c >>> @@ -74,6 +74,7 @@ static struct nlmsg_perm nlmsg_route_perms[] = >>> { RTM_DELMDB, NETLINK_ROUTE_SOCKET__NLMSG_WRITE }, >>> { RTM_GETMDB, NETLINK_ROUTE_SOCKET__NLMSG_READ }, >>> { RTM_NEWNSID, NETLINK_ROUTE_SOCKET__NLMSG_WRITE }, >>> + { RTM_DELNSID, NETLINK_ROUTE_SOCKET__NLMSG_READ }, >>> { RTM_GETNSID, NETLINK_ROUTE_SOCKET__NLMSG_READ }, >>> }; >> >> >> Can you elaborate a bit on the RTM_DELNSID type? Based only on the >> name I wonder if it should be treated as a "write" and not a "read" >> operation. > > The user is not allowed to delete a nsid (no method is implemented). This > RTM_DELNSID is only used for notifications.
Okay, thanks for clearing that up. -- paul moore www.paul-moore.com -- To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to [email protected] More majordomo info at http://vger.kernel.org/majordomo-info.html Please read the FAQ at http://www.tux.org/lkml/
