You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.

Paul Moore 09c50b4a52 selinux: Fix the NetLabel glue code for setsockopt() ... At some point we (okay, I) managed to break the ability for users to use the setsockopt() syscall to set IPv4 options when NetLabel was not active on the socket in question. The problem was noticed by someone trying to use the "-R" (record route) option of ping: # ping -R 10.0.0.1 ping: record route: No message of desired type The solution is relatively simple, we catch the unlabeled socket case and clear the error code, allowing the operation to succeed. Please note that we still deny users the ability to override IPv4 options on socket's which have NetLabel labeling active; this is done to ensure the labeling remains intact. Signed-off-by: Paul Moore <paul.moore@hp.com> Signed-off-by: James Morris <jmorris@namei.org>		16 years ago
..
include	SELinux: shrink sizeof av_inhert selinux_class_perm and context	16 years ago
ss	Merge branch 'next' into for-linus	16 years ago
Kconfig	selinux: Deprecate and schedule the removal of the the compat_net functionality	16 years ago
Makefile	…
avc.c	SELinux: shrink sizeof av_inhert selinux_class_perm and context	16 years ago
exports.c	…
hooks.c	CRED: Fix regression in cap_capable() as shown up by sys_faccessat() [ver #3]	16 years ago
netif.c	…
netlabel.c	selinux: Fix the NetLabel glue code for setsockopt()	16 years ago
netlink.c	…
netnode.c	…
netport.c	…
nlmsgtab.c	…
selinuxfs.c	Merge branch 'next' into for-linus	16 years ago
xfrm.c	…