tjh.dev / kernel
Linux kernel mirror (for testing) git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git
kernel os linux
1
fork

Configure Feed

Select the types of activity you want to include in your feed.

smack: Remove IPPROTO_UDPLITE support in security_sock_rcv_skb().

smack_socket_sock_rcv_skb() is registered as socket_sock_rcv_skb,
which is called as security_sock_rcv_skb() in sk_filter_trim_cap().

Now that UDP-Lite is gone, let's remove the IPPROTO_UDPLITE support
in smack_socket_sock_rcv_skb().

Signed-off-by: Kuniyuki Iwashima <kuniyu@google.com>
Reviewed-by: Willem de Bruijn <willemb@google.com>
Acked-by: Casey Schaufler <casey@schaufler-ca.com>
Link: https://patch.msgid.link/20260311052020.1213705-7-kuniyu@google.com
Signed-off-by: Jakub Kicinski <kuba@kernel.org>

authored by

Kuniyuki Iwashima and committed by
Jakub Kicinski b972cb5d 7accba6f

+1 -3
+1 -3
security/smack/smack_lsm.c
··· 4176 4176 sip->sin6_port = th->source; 4177 4177 break; 4178 4178 case IPPROTO_UDP: 4179 - case IPPROTO_UDPLITE: 4180 4179 uh = skb_header_pointer(skb, offset, sizeof(_udph), &_udph); 4181 4180 if (uh != NULL) 4182 4181 sip->sin6_port = uh->source; ··· 4300 4301 #if IS_ENABLED(CONFIG_IPV6) 4301 4302 case PF_INET6: 4302 4303 proto = smk_skb_to_addr_ipv6(skb, &sadd); 4303 - if (proto != IPPROTO_UDP && proto != IPPROTO_UDPLITE && 4304 - proto != IPPROTO_TCP) 4304 + if (proto != IPPROTO_UDP && proto != IPPROTO_TCP) 4305 4305 break; 4306 4306 #ifdef SMACK_IPV6_SECMARK_LABELING 4307 4307 skp = smack_from_skb(skb);