]> git.baikalelectronics.ru Git - kernel.git/commit
[SELINUX]: increment flow cache genid
authorVenkat Yekkirala <vyekkirala@TrustedCS.com>
Tue, 16 Jan 2007 00:38:45 +0000 (16:38 -0800)
committerDavid S. Miller <davem@sunset.davemloft.net>
Wed, 24 Jan 2007 04:25:41 +0000 (20:25 -0800)
commit1ab369ff74945b86deac738e48b54076574598da
treea813e11fc4168e8eb2597364b7d809cd981859ac
parentce2138470506707304e270132c13376a29e91688
[SELINUX]: increment flow cache genid

Currently, old flow cache entries remain valid even after
a reload of SELinux policy.

This patch increments the flow cache generation id
on policy (re)loads so that flow cache entries are
revalidated as needed.

Thanks to Herbet Xu for pointing this out. See:
http://marc.theaimsgroup.com/?l=linux-netdev&m=116841378704536&w=2

There's also a general issue as well as a solution proposed
by David Miller for when flow_cache_genid wraps. I might be
submitting a separate patch for that later.

I request that this be applied to 2.6.20 since it's
a security relevant fix.

Signed-off-by: Venkat Yekkirala <vyekkirala@TrustedCS.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
security/selinux/ss/services.c