On Tue, Jul 29, 2014 at 06:41:09PM +0000, Milan Broz wrote: > Th AF_ALG socket was missing a security label (e.g. SELinux) > which means that socket was in "unlabeled" state. > > This was recently demonstrated in the cryptsetup package > (cryptsetup v1.6.5 and later.) > See https://bugzilla.redhat.com/show_bug.cgi?id=1115120 > > This patch clones the sock's label from the parent sock > and resolves the issue (similar to AF_BLUETOOTH protocol family). > > Cc: stable@xxxxxxxxxxxxxxx > Signed-off-by: Milan Broz <gmazyland@xxxxxxxxx> Applied to crypto. Thanks. -- Email: Herbert Xu <herbert@xxxxxxxxxxxxxxxxxxx> Home Page: http://gondor.apana.org.au/~herbert/ PGP Key: http://gondor.apana.org.au/~herbert/pubkey.txt _______________________________________________ Selinux mailing list Selinux@xxxxxxxxxxxxx To unsubscribe, send email to Selinux-leave@xxxxxxxxxxxxx. To get help, send an email containing "help" to Selinux-request@xxxxxxxxxxxxx.
