]> git.baikalelectronics.ru Git - kernel.git/commit
NetLabel: add tag verification when adding new CIPSOv4 DOI definitions
authorPaul Moore <paul.moore@hp.com>
Fri, 17 Nov 2006 22:38:48 +0000 (17:38 -0500)
committerDavid S. Miller <davem@sunset.davemloft.net>
Sun, 3 Dec 2006 05:24:09 +0000 (21:24 -0800)
commit5bc1053d5800d26661b2f95dca0e102d72ff0022
treeab15a8da36aba770616b43b536efb881d9b48988
parent283b67c23b7cb6017eb6690f1c069f283390962a
NetLabel: add tag verification when adding new CIPSOv4 DOI definitions

Currently the CIPSOv4 engine does not do any sort of checking when a new DOI
definition is added.  The tags are still verified but only as a side effect of
normal NetLabel operation (packet processing, socket labeling, etc.) which
would cause application errors due to the faulty configuration.  This patch
adds tag checking when new DOI definition are added allowing us to catch these
configuration problems when they happen.

Signed-off-by: Paul Moore <paul.moore@hp.com>
Signed-off-by: James Morris <jmorris@namei.org>
net/ipv4/cipso_ipv4.c