summaryrefslogtreecommitdiffstats
path: root/kernel/sysctl_binary.c
diff options
context:
space:
mode:
authorCasey Schaufler <casey@schaufler-ca.com>2013-06-28 13:47:07 -0700
committerCasey Schaufler <casey@schaufler-ca.com>2013-08-01 20:04:02 -0700
commit677264e8fb73ea35a508700e19ce76c527576d1c (patch)
tree907b50534365824858c1df15dbfb4249c1079e4f /kernel/sysctl_binary.c
parent4d7cf4a1f49f76f4069114ee08be75cd68c37c5a (diff)
Smack: network label match fix
The Smack code that matches incoming CIPSO tags with Smack labels reaches through the NetLabel interfaces and compares the network data with the CIPSO header associated with a Smack label. This was done in a ill advised attempt to optimize performance. It works so long as the categories fit in a single capset, but this isn't always the case. This patch changes the Smack code to use the appropriate NetLabel interfaces to compare the incoming CIPSO header with the CIPSO header associated with a label. It will always match the CIPSO headers correctly. Targeted for git://git.gitorious.org/smack-next/kernel.git Signed-off-by: Casey Schaufler <casey@schaufler-ca.com>
Diffstat (limited to 'kernel/sysctl_binary.c')
0 files changed, 0 insertions, 0 deletions