lk/linux-kernel-test
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity

selinux: Fix missing calls to netlbl_skbuff_err()

Browse Source 
At some point I think I messed up and dropped the calls to netlbl_skbuff_err()
which are necessary for CIPSO to send error notifications to remote systems.
This patch re-introduces the error handling calls into the SELinux code.

Signed-off-by: Paul Moore <paul.moore@hp.com>
Acked-by: James Morris <jmorris@namei.org>
This commit is contained in:
Paul Moore
2008-10-10 10:16:31 -04:00
parent 99d854d231
commit dfaebe9825
5 changed files with 50 additions and 9 deletions
Download Patch File Download Diff File Expand all files Collapse all files

9
security/selinux/include/netlabel.h
View File

@ -39,6 +39,8 @@
#ifdef CONFIG_NETLABEL
void selinux_netlbl_cache_invalidate(void);
void selinux_netlbl_err(struct sk_buff *skb, int error, int gateway);
void selinux_netlbl_sk_security_reset(struct sk_security_struct *ssec,
int family);
@ -63,6 +65,13 @@ static inline void selinux_netlbl_cache_invalidate(void)
return;
}
static inline void selinux_netlbl_err(struct sk_buff *skb,
int error,
int gateway)
{
return;
}
static inline void selinux_netlbl_sk_security_reset(
struct sk_security_struct *ssec,
int family)