tree 5126a9946e852ec3a1d4f71aaff2c28c93b2f2fb
parent 5eb9faa4121fe1480665772d3e5869baac198e43
author Paul Moore <paul@paul-moore.com> 1588082342 -0400
committer Luca Weiss <luca.weiss@fairphone.com> 1629724853 +0200

selinux: properly handle multiple messages in selinux_netlink_send()

commit fb73974172ffaaf57a7c42f35424d9aece1a5af6 upstream.

Fix the SELinux netlink_send hook to properly handle multiple netlink
messages in a single sk_buff; each message is parsed and subject to
SELinux access control.  Prior to this patch, SELinux only inspected
the first message in the sk_buff.

Cc: stable@vger.kernel.org
Reported-by: Dmitry Vyukov <dvyukov@google.com>
Reviewed-by: Stephen Smalley <stephen.smalley.work@gmail.com>
Signed-off-by: Paul Moore <paul@paul-moore.com>
[bwh: Backported to 3.16: adjust context]
Signed-off-by: Ben Hutchings <ben@decadent.org.uk>
Issue: SEC-2533
Change-Id: I47dcc54d87f0c879b406b476aa725807f4dd1d23
(cherry picked from commit 9592b90cdc99f58e0674e64037c422ea7e9aa367)