selinux: Implement mptcp_add_subflow hook (!2624) · Merge requests · Red Hat / centos-stream / src / kernel / centos-stream-9

Paolo Abeni requested to merge pabeni/centos-stream-9:bz2141225_selinux_mptcp into main May 31, 2023

Bugzilla: https://bugzilla.redhat.com/show_bug.cgi?id=2141225 Tested: vs bz reproducer

This series address an issue with bad selinux ctx for passive mptcp socket, leading the unexpected deny of mptcpized application with selinux enforcing mode.

Signed-off-by: Paolo Abeni pabeni@redhat.com

Edited May 31, 2023 by Paolo Abeni

selinux: Implement mptcp_add_subflow hook

Merge request reports