You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.

Paul Moore 09c50b4a52 selinux: Fix the NetLabel glue code for setsockopt() ... At some point we (okay, I) managed to break the ability for users to use the setsockopt() syscall to set IPv4 options when NetLabel was not active on the socket in question. The problem was noticed by someone trying to use the "-R" (record route) option of ping: # ping -R 10.0.0.1 ping: record route: No message of desired type The solution is relatively simple, we catch the unlabeled socket case and clear the error code, allowing the operation to succeed. Please note that we still deny users the ability to override IPv4 options on socket's which have NetLabel labeling active; this is done to ensure the labeling remains intact. Signed-off-by: Paul Moore <paul.moore@hp.com> Signed-off-by: James Morris <jmorris@namei.org>		16 years ago
..
keys	security: introduce missing kfree	16 years ago
selinux	selinux: Fix the NetLabel glue code for setsockopt()	16 years ago
smack	smackfs load append mode fix	16 years ago
Kconfig	introduce new LSM hooks where vfsmount is available.	16 years ago
Makefile	securityfs: do not depend on CONFIG_SECURITY	17 years ago
capability.c	Revert "CRED: Fix regression in cap_capable() as shown up by sys_faccessat() [ver #2]"	16 years ago
commoncap.c	Merge branch 'next' into for-linus	16 years ago
device_cgroup.c	devices cgroup: allow mkfifo	16 years ago
inode.c	zero i_uid/i_gid on inode allocation	16 years ago
root_plug.c	Revert "CRED: Fix regression in cap_capable() as shown up by sys_faccessat() [ver #2]"	16 years ago
security.c	Merge branch 'next' into for-linus	16 years ago