tree 0fec94dc752f3e3c62721ab004eb5d92a983b63d
parent 46b0260c246869c5be3deac3c6c7c6607c2d7f78
author Paul Moore <paul@paul-moore.com> 1588082342 -0400
committer Luca Weiss <luca.weiss@fairphone.com> 1626347891 +0200

selinux: properly handle multiple messages in selinux_netlink_send()

commit fb73974172ffaaf57a7c42f35424d9aece1a5af6 upstream.

Fix the SELinux netlink_send hook to properly handle multiple netlink
messages in a single sk_buff; each message is parsed and subject to
SELinux access control.  Prior to this patch, SELinux only inspected
the first message in the sk_buff.

Cc: stable@vger.kernel.org
Reported-by: Dmitry Vyukov <dvyukov@google.com>
Reviewed-by: Stephen Smalley <stephen.smalley.work@gmail.com>
Signed-off-by: Paul Moore <paul@paul-moore.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>

(cherry picked from commit 6affa87d168d91af6c8f303dc1fc7a7f59869818)
(cherry picked from commit 0e4d54ed47d9862440c880878b7706dc94d37a25)