Vladis Dronov 20c292862a selinux: rate-limit netlink message warnings in selinux_nlmsg_perm() ...

commit 76319946f321e30872dd72af7de867cb26e7a373 upstream.

Any process is able to send netlink messages with invalid types.
Make the warning rate-limited to prevent too much log spam.

The warning is supposed to help to find misbehaving programs, so
print the triggering command name and pid.

Reported-by: Florian Weimer <fweimer@redhat.com>
Signed-off-by: Vladis Dronov <vdronov@redhat.com>
[PM: subject line tweak to make checkpatch.pl happy]
Signed-off-by: Paul Moore <pmoore@redhat.com>
Signed-off-by: Ben Hutchings <ben@decadent.org.uk>
Signed-off-by: Kevin F. Haggerty <haggertk@lineageos.org>
Change-Id: I518bf279dcf40be64f6d8e26e54671c44e03c9f2

2020-08-08 16:42:47 +02:00

..

apparmor

nick kvfree() from apparmor

2019-08-05 14:22:44 +02:00

integrity

Merge tag 'v3.4.113' into lineage-16.0

2019-08-05 14:20:47 +02:00

keys

KEYS: add missing permission check for request_key() destination

2019-08-08 16:35:41 +02:00

selinux

selinux: rate-limit netlink message warnings in selinux_nlmsg_perm()

2020-08-08 16:42:47 +02:00

smack

consitify do_mount() arguments

2019-08-06 10:44:14 +02:00

tima_uevent

misc: Import SM-G900H kernel source code

2019-08-02 15:14:10 +02:00

tomoyo

consitify do_mount() arguments

2019-08-06 10:44:14 +02:00

tz_iccc

misc: Import SM-G900H kernel source code

2019-08-02 15:14:10 +02:00

yama

Merge tag 'v3.4.113' into lineage-16.0

2019-08-05 14:20:47 +02:00

capability.c

consitify do_mount() arguments

2019-08-06 10:44:14 +02:00

commoncap.c

BACKPORT: commoncap: don't alloc the credential unless needed in cap_task_prctl

2019-08-08 15:08:47 +02:00

device_cgroup.c

cgroup: remove cgroup_subsys argument from callbacks

2012-02-02 09:20:22 -08:00

inode.c

vfs: Add permission2 for filesystems with per mount permissions

2019-08-06 10:44:34 +02:00

Kconfig

misc: Import SM-G900H kernel source code

2019-08-02 15:14:10 +02:00

lsm_audit.c

security: lsm_audit: add ioctl specific auditing

2015-06-30 12:52:32 +05:30

Makefile

misc: Remove Samsung Secure Data Protection sprinkles

2019-08-05 09:12:33 +02:00

min_addr.c

mmap_min_addr check CAP_SYS_RAWIO only for write

2010-04-23 08:56:31 +10:00

security.c

consitify do_mount() arguments

2019-08-06 10:44:14 +02:00