]> code.ossystems Code Review - openembedded-core.git/commit
systemd: selinux hook handling to enumerate nexthop
authorPurushottam choudhary <purushottam.choudhary@kpit.com>
Wed, 4 Nov 2020 10:34:00 +0000 (16:04 +0530)
committerRichard Purdie <richard.purdie@linuxfoundation.org>
Sun, 8 Nov 2020 14:03:16 +0000 (14:03 +0000)
commitc521df3f0a86521ce78fd5c057293b2c242fba79
treed273babd11d88c9401c2ec59247c20d15b457759
parentabb95c421bb67d452691819e3f63dabd02e2ba37
systemd: selinux hook handling to enumerate nexthop

When selinux is enabled, the call of
manager_rtnl_enumerate_nexthop() fails.
This fix is to facilitate selinux hook handling
for enumerating nexthop.

In manager_rtnl_enumerate_nexthop() there is a check
if "Not supported" is returned by the send_netlink() call.
This check expects that -EOPNOTSUPP is returned,
the selinux hook seems to return -EINVAL instead.
This happens in kernel older than 5.3
(more specificallytorvalds/linux@65ee00a) as it does not support
nexthop handling through netlink.
And if SELinux is enforced in the order kernel, callingRTM_GETNEXTHOP
returns -EINVAL.

Thus adding a call in the manager_rtnl_enumerate_nexthop for the
extra return -EINVAL.

Note: systemd version is different in yocto project (v246.6) and
systemd master(v247) and In systemd verison(246.6)
mac_selinux_enforcing() function is not declared and defined.

Signed-off-by: Purushottam choudhary <purushottam.choudhary@kpit.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
meta/recipes-core/systemd/systemd/selinux-hook-handling-to-enumerate-nexthop.patch [new file with mode: 0644]
meta/recipes-core/systemd/systemd_246.6.bb