summaryrefslogtreecommitdiff
path: root/security/selinux/include/classmap.h
diff options
context:
space:
mode:
authorAlex Yakavenka <ayakav@codeaurora.org>2016-04-08 15:29:45 -0700
committerGerrit - the friendly Code Review server <code-review@localhost>2017-10-24 22:08:44 -0700
commitf5ada1fa7a011500cac199f550e0583208448e61 (patch)
treebeef8855b27af43efb1da2361c6bb2c673ac2913 /security/selinux/include/classmap.h
parent9551e129dd2625ea2ab4fa5620820849b069ce2f (diff)
security: Extend SELinux to support CAN sockets
CAN socket SELinux support is required to be able to distinguish between generic socket and can_socket Change-Id: I9ec2099fc4c08ab6406e33ff9ad821ef18261763 Signed-off-by: Alex Yakavenka <ayakav@codeaurora.org>
Diffstat (limited to 'security/selinux/include/classmap.h')
-rw-r--r--security/selinux/include/classmap.h2
1 files changed, 2 insertions, 0 deletions
diff --git a/security/selinux/include/classmap.h b/security/selinux/include/classmap.h
index b393d29ae857..d40631150045 100644
--- a/security/selinux/include/classmap.h
+++ b/security/selinux/include/classmap.h
@@ -157,5 +157,7 @@ struct security_class_mapping secclass_map[] = {
{ COMMON_SOCK_PERMS, "attach_queue", NULL } },
{ "binder", { "impersonate", "call", "set_context_mgr", "transfer",
NULL } },
+ { "can_socket",
+ { COMMON_SOCK_PERMS, NULL } },
{ NULL }
};