Re: [PATCH pre-5.10] selinux: vsock: Set SID for socket returned by accept()

[Sasha Levin]

On Mon, Mar 29, 2021 at 06:24:43PM +0000, David Brazdil wrote:
> [Backport of commit 1f935e8e72ec28dddb2dc0650b3b6626a293d94b to all
> stable branches from 4.4 to 5.4, inclusive]
>
> For AF_VSOCK, accept() currently returns sockets that are unlabelled.
> Other socket families derive the child's SID from the SID of the parent
> and the SID of the incoming packet. This is typically done as the
> connected socket is placed in the queue that accept() removes from.
>
> Reuse the existing 'security_sk_clone' hook to copy the SID from the
> parent (server) socket to the child. There is no packet SID in this
> case.

Queued up, thanks!

--
Thanks,
Sasha