]> git.baikalelectronics.ru Git - kernel.git/commit
projects / kernel.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 53e24e6) | patch
selinux: fix a problem with IPv6 traffic denials in selinux_ip_postroute()
authorPaul Moore <pmoore@redhat.com>
Wed, 3 Sep 2014 14:51:59 +0000 (10:51 -0400)
committerPaul Moore <pmoore@redhat.com>
Wed, 3 Sep 2014 14:51:59 +0000 (10:51 -0400)
commiteab88ef58aebc377c52a2f669a1f001c4634463c
treeb7a68a5bc2002ccf0980d84dd1356876591107betree | snapshot
parent53e24e676979f830dea71b86e6f7798952267c1bcommit | diff
selinux: fix a problem with IPv6 traffic denials in selinux_ip_postroute()

A previous commit b3b42831bc0219fe882f9b13ebf83a53ce5b3872 ("selinux:
process labeled IPsec TCP SYN-ACK packets properly in
selinux_ip_postroute()") mistakenly left out a 'break' from a switch
statement which caused problems with IPv6 traffic.

Thanks to Florian Westphal for reporting and debugging the issue.

Reported-by: Florian Westphal <fwestpha@redhat.com>
Signed-off-by: Paul Moore <pmoore@redhat.com>
security/selinux/hooks.c diff | blob | history
Linux Kernel Source Tree.