]> git.baikalelectronics.ru Git - kernel.git/commit
[NetLabel]: correct improper handling of non-NetLabel peer contexts
authorPaul Moore <paul.moore@hp.com>
Mon, 25 Sep 2006 22:52:01 +0000 (15:52 -0700)
committerDavid S. Miller <davem@davemloft.net>
Mon, 25 Sep 2006 22:52:01 +0000 (15:52 -0700)
commit3d647f93438f9e03ce390d790aa8bf1e5e1bd9ea
tree95a077fb9289a95c352af77f18f12e5aba3313c6
parent76955e4f52532506596503de5efec2545e5e032e
[NetLabel]: correct improper handling of non-NetLabel peer contexts

Fix a problem where NetLabel would always set the value of
sk_security_struct->peer_sid in selinux_netlbl_sock_graft() to the context of
the socket, causing problems when users would query the context of the
connection.  This patch fixes this so that the value in
sk_security_struct->peer_sid is only set when the connection is NetLabel based,
otherwise the value is untouched.

Signed-off-by: Paul Moore <paul.moore@hp.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
include/net/cipso_ipv4.h
include/net/netlabel.h
net/ipv4/cipso_ipv4.c
net/netlabel/netlabel_kapi.c
security/selinux/ss/services.c