From 09879cfc8abb8884cd11fe9ee3125e866190e207 Mon Sep 17 00:00:00 2001 From: Stephen Smalley Date: Wed, 17 May 2017 11:31:48 -0400 Subject: refpolicy: Define smc_socket security class Linux kernel commit da69a5306ab9 ("selinux: support distinctions among all network address families") triggers a build error if a new address family is added without defining a corresponding SELinux security class. As a result, the smc_socket class was added to the kernel to resolve a build failure as part of merge commit 3051bf36c25d that introduced AF_SMC circa Linux 4.11. Define this security class and its access vector, note that it is enabled as part of the extended_socket_class policy capability, and add it to the socket_class_set macro. Signed-off-by: Stephen Smalley --- policy/flask/security_classes | 1 + 1 file changed, 1 insertion(+) (limited to 'policy/flask/security_classes') diff --git a/policy/flask/security_classes b/policy/flask/security_classes index 18f18fd8e..18c4f9748 100644 --- a/policy/flask/security_classes +++ b/policy/flask/security_classes @@ -182,5 +182,6 @@ class nfc_socket class vsock_socket class kcm_socket class qipcrtr_socket +class smc_socket # FLASK -- cgit v1.2.3-65-gdbad