summaryrefslogtreecommitdiff
path: root/include
diff options
context:
space:
mode:
authorCasey Schaufler <casey@schaufler-ca.com>2013-06-28 13:47:07 -0700
committerCasey Schaufler <casey@schaufler-ca.com>2013-08-01 20:04:02 -0700
commit677264e8fb73ea35a508700e19ce76c527576d1c (patch)
tree907b50534365824858c1df15dbfb4249c1079e4f /include
parent4d7cf4a1f49f76f4069114ee08be75cd68c37c5a (diff)
Smack: network label match fix
The Smack code that matches incoming CIPSO tags with Smack labels reaches through the NetLabel interfaces and compares the network data with the CIPSO header associated with a Smack label. This was done in a ill advised attempt to optimize performance. It works so long as the categories fit in a single capset, but this isn't always the case. This patch changes the Smack code to use the appropriate NetLabel interfaces to compare the incoming CIPSO header with the CIPSO header associated with a label. It will always match the CIPSO headers correctly. Targeted for git://git.gitorious.org/smack-next/kernel.git Signed-off-by: Casey Schaufler <casey@schaufler-ca.com>
Diffstat (limited to 'include')
0 files changed, 0 insertions, 0 deletions