From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from mail-pl1-f201.google.com (mail-pl1-f201.google.com [209.85.214.201]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by smtp.subspace.kernel.org (Postfix) with ESMTPS id CE8DB3CE4AF for ; Wed, 4 Mar 2026 19:30:47 +0000 (UTC) Authentication-Results: smtp.subspace.kernel.org; arc=none smtp.client-ip=209.85.214.201 ARC-Seal:i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1772652650; cv=none; b=VVrlny67d6BbAW7PSppeoHTJk0GQoR3NnpBa85qXeLJvyoW4ZFXz44UGUm6acFbL8FFB/43yXY9a8CN534uZuCQrrkukjXaei/4Uv3/IJDhKZ54pXrFeMEPybqQppGiNDJE3goqkh6YYf9buq3plstdpm2M0+IrYJJ/T1RAn3+0= ARC-Message-Signature:i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1772652650; c=relaxed/simple; bh=0mBpGfUkeMd8K93JQlf37dR4eRZ5J4VIdoM3ZmPtk3o=; h=Date:In-Reply-To:Mime-Version:References:Message-ID:Subject:From: To:Cc:Content-Type; b=mgmUD5E8uRatAkwcq/sa0lu2qmJq+cRAZwDvDiF9qyFnuXZ+f8yue7XWO6ANpKDvY3agvE8XbK2qRaMA98AFkX6abAnuQlH9sxf8ncIKESUgCaPIFGGEbMA0E0UAQo1oWfJ1NKEdqW/UEj4xbFJ1bof1YBicUCcbWuy0LeliDz0= ARC-Authentication-Results:i=1; smtp.subspace.kernel.org; dmarc=pass (p=reject dis=none) header.from=google.com; spf=pass smtp.mailfrom=flex--kuniyu.bounces.google.com; dkim=pass (2048-bit key) header.d=google.com header.i=@google.com header.b=cCeqlCEx; arc=none smtp.client-ip=209.85.214.201 Authentication-Results: smtp.subspace.kernel.org; dmarc=pass (p=reject dis=none) header.from=google.com Authentication-Results: smtp.subspace.kernel.org; spf=pass smtp.mailfrom=flex--kuniyu.bounces.google.com Authentication-Results: smtp.subspace.kernel.org; dkim=pass (2048-bit key) header.d=google.com header.i=@google.com header.b="cCeqlCEx" Received: by mail-pl1-f201.google.com with SMTP id d9443c01a7336-2ae5031c6c5so168500915ad.3 for ; Wed, 04 Mar 2026 11:30:47 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=20230601; t=1772652647; x=1773257447; darn=vger.kernel.org; h=cc:to:from:subject:message-id:references:mime-version:in-reply-to :date:from:to:cc:subject:date:message-id:reply-to; bh=aOxh1jjHnNBlU/r3wfUuHYPwmcibM6OILDY5c9b7tZs=; b=cCeqlCExlPvBsuxWHiTShI0REY5zjgU9npQChVX4/XEpPiAYjMeeHe+f+L6svb8h7d IPtWHAiiu3nCrZvrl0BLFqfGS0ln2/gBi3WjCmxSckof4xlGJmpvUMc/34j0afhfwLdX 85y3iOItTwedvvEOgL3EeYuL5WakONB4ZAjzPgT9tg4kIy5rjdms9a/5cgFPO0SxlPHZ 8EdBrzWL+cPVycH6LskQmbbAf62WVT8w/WH54GoWpuYoikDdjzDJUsAeBRVkX7MDyXNW jNv8NJstFxJ1VvRDvGDgNycXTWvUEK27issGSe/Td/C/79pyhAeJ7dbNcOgA8/jSs3I6 eb6w== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1772652647; x=1773257447; h=cc:to:from:subject:message-id:references:mime-version:in-reply-to :date:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to; bh=aOxh1jjHnNBlU/r3wfUuHYPwmcibM6OILDY5c9b7tZs=; b=ASV/Z5CMamS0L7izCBuTpfqaDuY1GtPyk7CDYYrfmOBavnQsSIuXQEA42KUnT8pmCy zby31L+2aeIsGSHBVasg2Ixex4IZVxYX60291urlxdBcbgNY88AdLaKHQC8IXhhH3Zt6 PhPVSaxRsLoRonplaNUl5KjdzKL/1yZ8m5KqVLfhSBPdjRNabL9hWOCb49rNGOPfWxiy pRwZK2k78u9T32o8AhOtuJVPn77+qjTP9BpiX9R4AVgPybLsyow/yMOBmbfERiaUIhKo TOKDNIzh1itztgmCNJ4UKqMAymMd8VHm6i97ff4+D/uJWu7VkCAfO6LlQZulvMX6mQwi z98w== X-Forwarded-Encrypted: i=1; AJvYcCUTIHbUD+vhkZJmByCRDQez0N8w5r9hhC24zKV3vfFJuozTGcqt7QgGjEFIQDAMplxEpy8WuZE=@vger.kernel.org X-Gm-Message-State: AOJu0YyzyPCCyM2dVhJm5Aq41Wjtd26ceqOH1OdRhRbEAWFZrdyaqt0Z PQ6F4+0Zr5MP8PHGK/tEpSRbzGW3R2ESFNoFaq4wxmog5Ivv4uLfJ+3coD/6NhPnWLBUnUnCU3N L8AXpQA== X-Received: from pltt17.prod.google.com ([2002:a17:902:d151:b0:2ae:5031:c200]) (user=kuniyu job=prod-delivery.src-stubby-dispatcher) by 2002:a17:903:1a43:b0:2ae:5daf:85dd with SMTP id d9443c01a7336-2ae6a9def98mr32837055ad.11.1772652647104; Wed, 04 Mar 2026 11:30:47 -0800 (PST) Date: Wed, 4 Mar 2026 19:28:37 +0000 In-Reply-To: <20260304193034.1870586-1-kuniyu@google.com> Precedence: bulk X-Mailing-List: netdev@vger.kernel.org List-Id: List-Subscribe: List-Unsubscribe: Mime-Version: 1.0 References: <20260304193034.1870586-1-kuniyu@google.com> X-Mailer: git-send-email 2.53.0.473.g4a7958ca14-goog Message-ID: <20260304193034.1870586-7-kuniyu@google.com> Subject: [PATCH v1 net-next 06/15] smack: Remove IPPROTO_UDPLITE support in security_sock_rcv_skb(). From: Kuniyuki Iwashima To: Willem de Bruijn , David Ahern , "David S . Miller" , Eric Dumazet , Jakub Kicinski , Paolo Abeni Cc: Simon Horman , Kuniyuki Iwashima , Kuniyuki Iwashima , netdev@vger.kernel.org, Casey Schaufler , Paul Moore , James Morris , "Serge E. Hallyn" , linux-security-module@vger.kernel.org Content-Type: text/plain; charset="UTF-8" smack_socket_sock_rcv_skb() is registered as socket_sock_rcv_skb, which is called as security_sock_rcv_skb() in sk_filter_trim_cap(). Now that UDP-Lite is gone, let's remove the IPPROTO_UDPLITE support in smack_socket_sock_rcv_skb(). Signed-off-by: Kuniyuki Iwashima --- Cc: Casey Schaufler Cc: Paul Moore Cc: James Morris Cc: "Serge E. Hallyn" Cc: linux-security-module@vger.kernel.org --- security/smack/smack_lsm.c | 4 +--- 1 file changed, 1 insertion(+), 3 deletions(-) diff --git a/security/smack/smack_lsm.c b/security/smack/smack_lsm.c index 98af9d7b9434..e581d6465946 100644 --- a/security/smack/smack_lsm.c +++ b/security/smack/smack_lsm.c @@ -4176,7 +4176,6 @@ static int smk_skb_to_addr_ipv6(struct sk_buff *skb, struct sockaddr_in6 *sip) sip->sin6_port = th->source; break; case IPPROTO_UDP: - case IPPROTO_UDPLITE: uh = skb_header_pointer(skb, offset, sizeof(_udph), &_udph); if (uh != NULL) sip->sin6_port = uh->source; @@ -4301,8 +4300,7 @@ static int smack_socket_sock_rcv_skb(struct sock *sk, struct sk_buff *skb) #if IS_ENABLED(CONFIG_IPV6) case PF_INET6: proto = smk_skb_to_addr_ipv6(skb, &sadd); - if (proto != IPPROTO_UDP && proto != IPPROTO_UDPLITE && - proto != IPPROTO_TCP) + if (proto != IPPROTO_UDP && proto != IPPROTO_TCP) break; #ifdef SMACK_IPV6_SECMARK_LABELING skp = smack_from_skb(skb); -- 2.53.0.473.g4a7958ca14-goog