selinux: rate-limit netlink message warnings in selinux_nlmsg_perm()
authorVladis Dronov <vdronov@redhat.com>
Thu, 24 Dec 2015 16:09:41 +0000 (11:09 -0500)
committerPaul Moore <pmoore@redhat.com>
Thu, 24 Dec 2015 16:09:41 +0000 (11:09 -0500)
commit76319946f321e30872dd72af7de867cb26e7a373
treeeb12a0f9f5e31bd7fd5133771371ea00033a0e94
parentf9df6458218f4fe8a1c3bf0af89c1fa9eaf0db39
selinux: rate-limit netlink message warnings in selinux_nlmsg_perm()

Any process is able to send netlink messages with invalid types.
Make the warning rate-limited to prevent too much log spam.

The warning is supposed to help to find misbehaving programs, so
print the triggering command name and pid.

Reported-by: Florian Weimer <fweimer@redhat.com>
Signed-off-by: Vladis Dronov <vdronov@redhat.com>
[PM: subject line tweak to make checkpatch.pl happy]
Signed-off-by: Paul Moore <pmoore@redhat.com>
security/selinux/hooks.c