From: James Morris This patch fixes a bug in the SELinux Netlink message type detection code, where the wrong constant was being used in a case statement. The incorrect value is not valid for this class of object so it would not have been reached, and fallen through to a default handler for all Netlink messages. Signed-off-by: James Morris Signed-off-by: Stephen Smalley Signed-off-by: Andrew Morton --- 25-akpm/security/selinux/nlmsgtab.c | 2 +- 1 files changed, 1 insertion(+), 1 deletion(-) diff -puN security/selinux/nlmsgtab.c~selinux-fix-bug-in-netlink-message-type-detection security/selinux/nlmsgtab.c --- 25/security/selinux/nlmsgtab.c~selinux-fix-bug-in-netlink-message-type-detection 2005-04-06 01:27:03.000000000 -0700 +++ 25-akpm/security/selinux/nlmsgtab.c 2005-04-06 01:27:03.000000000 -0700 @@ -126,7 +126,7 @@ int selinux_nlmsg_lookup(u16 sclass, u16 break; case SECCLASS_NETLINK_FIREWALL_SOCKET: - case NETLINK_IP6_FW: + case SECCLASS_NETLINK_IP6FW_SOCKET: err = nlmsg_perm(nlmsg_type, perm, nlmsg_firewall_perms, sizeof(nlmsg_firewall_perms)); break; _