different from the sock's owner process security context.
Signed-off-by: Roy.Li <rongqing.li@windriver.com>
---
net/unix/af_unix.c | 15 +++++++++++++--
1 files changed, 13 insertions(+), 2 deletions(-)
@@ -2239,12 +2239,15 @@ static void unix_seq_stop(struct seq_file *seq, void *v)
spin_unlock(&unix_table_lock);
}
+#define OFFSET_PATH_START 40
static int unix_seq_show(struct seq_file *seq, void *v)
{
+ int seqlen, offset = OFFSET_PATH_START;
if (v == SEQ_START_TOKEN)
- seq_puts(seq, "Num RefCount Protocol Flags Type St "
- "Inode Path\n");
+ seq_printf(seq, "Num RefCount Protocol Flags Type St "
+ "Inode Path %s",
+ (selinux_is_enabled() ? " scontext\n" : "\n"));
else {
struct sock *s = v;
struct unix_sock *u = unix_sk(s);
@@ -2275,7 +2278,15 @@ static int unix_seq_show(struct seq_file *seq, void *v)
}
for ( ; i < len; i++)
seq_putc(seq, u->addr->name->sun_path[i]);
+ if (offset > len)
+ offset -= (len + 1);
+ else
+ offset = 0;
}
+
+ seq_printf(seq, "%*c", offset, '\b');
+ sock_write_secctx(s, seq, &seqlen);
+
unix_state_unlock(s);
seq_putc(seq, '\n');
}
From: Roy.Li <rongqing.li@windriver.com> Export the unix sock's security context to proc, since it maybe