]> git.baikalelectronics.ru Git - kernel.git/commit
selinux: Fix wrong checks for selinux_policycap_netpeer
authorSteffen Klassert <steffen.klassert@secunet.com>
Wed, 23 Feb 2011 11:55:21 +0000 (12:55 +0100)
committerEric Paris <eparis@redhat.com>
Fri, 25 Feb 2011 20:00:47 +0000 (15:00 -0500)
commitd0e6f633870a33da44df93a9fe9782573dcf13be
tree224bfa579013b55ed6c459879ba0aab6d28e8ae2
parent4dfe9e2833c8c0c61a553ac907fae403a734b942
selinux: Fix wrong checks for selinux_policycap_netpeer

selinux_sock_rcv_skb_compat and selinux_ip_postroute_compat are just
called if selinux_policycap_netpeer is not set. However in these
functions we check if selinux_policycap_netpeer is set. This leads
to some dead code and to the fact that selinux_xfrm_postroute_last
is never executed. This patch removes the dead code and the checks
for selinux_policycap_netpeer in the compatibility functions.

Signed-off-by: Steffen Klassert <steffen.klassert@secunet.com>
Acked-by: Paul Moore <paul.moore@hp.com>
Signed-off-by: Eric Paris <eparis@redhat.com>
security/selinux/hooks.c