From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from goalie.tycho.ncsc.mil (goalie [144.51.242.250]) by tarius.tycho.ncsc.mil (8.14.4/8.14.4) with ESMTP id u7NFLTaY006341 for ; Tue, 23 Aug 2016 11:21:36 -0400 Message-ID: <1471965682.30659.22.camel@trentalancia.net> Subject: [PATCH] Update libsepol to support the policy capability for AF_ALG sockets From: Guido Trentalancia To: Stephen Smalley , Paul Moore Cc: selinux@tycho.nsa.gov Date: Tue, 23 Aug 2016 17:21:22 +0200 In-Reply-To: <082767a3-acab-4d46-6195-06e35251d53e@tycho.nsa.gov> References: <1471709886.22998.1.camel@trentalancia.net> <89E5C3EA-9794-4496-A195-1C997A5BBF44@trentalancia.net> <43BE5B4F-9AE4-4EDB-825A-F1C15042B385@trentalancia.net> <1471799849.2544.2.camel@trentalancia.net> <1471870947.2354.1.camel@trentalancia.net> <1471899875.19333.3.camel@trentalancia.net> <1471961693.30659.7.camel@trentalancia.net> <082767a3-acab-4d46-6195-06e35251d53e@tycho.nsa.gov> Content-Type: text/plain; charset="UTF-8" Mime-Version: 1.0 List-Id: "Security-Enhanced Linux \(SELinux\) mailing list" List-Post: List-Help: Update libsepol with the new policy capability needed to classify sockets in the AF_ALG namespace (Crypto API). Signed-off-by: Guido Trentalancia --- include/sepol/policydb/polcaps.h | 1 + src/polcaps.c | 1 + 2 files changed, 2 insertions(+) diff -pru libsepol-git-23082016/include/sepol/policydb/polcaps.h libsepol-git-23082016-alg_socket/include/sepol/policydb/polcaps.h --- libsepol-git-23082016/include/sepol/policydb/polcaps.h 2016-08-23 17:08:58.690837319 +0200 +++ libsepol-git-23082016-alg_socket/include/sepol/policydb/polcaps.h 2016-08-23 17:13:52.794644956 +0200 @@ -11,6 +11,7 @@ enum { POLICYDB_CAPABILITY_OPENPERM, POLICYDB_CAPABILITY_REDHAT1, /* reserved for RH testing of ptrace_child */ POLICYDB_CAPABILITY_ALWAYSNETWORK, + POLICYDB_CAPABILITY_ALGSOCKET, /* Crypto API socket namespace */ __POLICYDB_CAPABILITY_MAX }; #define POLICYDB_CAPABILITY_MAX (__POLICYDB_CAPABILITY_MAX - 1) diff -pru libsepol-git-23082016/src/polcaps.c libsepol-git-23082016-alg_socket/src/polcaps.c --- libsepol-git-23082016/src/polcaps.c 2016-08-23 17:08:58.696837395 +0200 +++ libsepol-git-23082016-alg_socket/src/polcaps.c 2016-08-23 17:11:49.145026939 +0200 @@ -10,6 +10,7 @@ static const char *polcap_names[] = { "open_perms", /* POLICYDB_CAPABILITY_OPENPERM */ "redhat1", /* POLICYDB_CAPABILITY_REDHAT1, aka ptrace_child */ "always_check_network", /* POLICYDB_CAPABILITY_ALWAYSNETWORK */ + "alg_socket", /* POLICYDB_CAPABILITY_ALGSOCKET (Crypto API socket namespace) */ NULL };