tree 28338fe5b55226183a2280b767a582289cf49f0d
parent 33d97cfa539e7556760d4887d454f6b8308220a8
author Vladis Dronov <vdronov@redhat.com> 1450973381 -0500
committer chrmhoffmann <chrmhoffmann@gmail.com> 1612815699 +0100

selinux: rate-limit netlink message warnings in selinux_nlmsg_perm()

commit 76319946f321e30872dd72af7de867cb26e7a373 upstream.

Any process is able to send netlink messages with invalid types.
Make the warning rate-limited to prevent too much log spam.

The warning is supposed to help to find misbehaving programs, so
print the triggering command name and pid.

Reported-by: Florian Weimer <fweimer@redhat.com>
Signed-off-by: Vladis Dronov <vdronov@redhat.com>
[PM: subject line tweak to make checkpatch.pl happy]
Signed-off-by: Paul Moore <pmoore@redhat.com>
Signed-off-by: Ben Hutchings <ben@decadent.org.uk>
Signed-off-by: Kevin F. Haggerty <haggertk@lineageos.org>
Change-Id: I518bf279dcf40be64f6d8e26e54671c44e03c9f2