[PATCH v5 41/42] selinux: convert nlmsg_sock_has_extended_perms() to namespace-aware
From: Stephen Smalley <stephen.smalley.work@gmail.com>
Date: 2025-06-17 14:06:55
Also in:
selinux
Subsystem:
selinux security module, the rest · Maintainers:
Paul Moore, Stephen Smalley, Linus Torvalds
Convert nlmsg_sock_has_extended_perms() to use the cred_has_extended_perms() helper for namespace-aware checking. Signed-off-by: Stephen Smalley <stephen.smalley.work@gmail.com> --- security/selinux/hooks.c | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-)
diff --git a/security/selinux/hooks.c b/security/selinux/hooks.c
index 5f27d2932e4b..7923ce5e6a4d 100644
--- a/security/selinux/hooks.c
+++ b/security/selinux/hooks.c@@ -6273,9 +6273,9 @@ static int nlmsg_sock_has_extended_perms(struct sock *sk, u32 perms, u16 nlmsg_t driver = nlmsg_type >> 8; xperm = nlmsg_type & 0xff; - return avc_has_extended_perms(current_selinux_state, current_sid(), - sksec->sid, sksec->sclass, perms, - driver, AVC_EXT_NLMSG, xperm, &ad); + return cred_has_extended_perms(current_cred(), sksec->sid, + sksec->sclass, perms, driver, + AVC_EXT_NLMSG, xperm, &ad); } static int selinux_netlink_send(struct sock *sk, struct sk_buff *skb)
--
2.49.0