| commit | 2fe66ec242d3f76e3b0101f36419e7e5405bcff3 | [log] [tgz] |
|---|---|---|
| author | Eric Paris <eparis@redhat.com> | Tue Nov 23 06:28:08 2010 +0000 |
| committer | David S. Miller <davem@davemloft.net> | Tue Nov 23 10:50:17 2010 -0800 |
| tree | 2091420d53ae1bf9e7673c2275b36c6b1e6aac1b | |
| parent | 04f6d70f6e64900a5d70a5fc199dd9d5fa787738 [diff] |
SELinux: indicate fatal error in compat netfilter code The SELinux ip postroute code indicates when policy rejected a packet and passes the error back up the stack. The compat code does not. This patch sends the same kind of error back up the stack in the compat code. Based-on-patch-by: Paul Moore <paul.moore@hp.com> Signed-off-by: Eric Paris <eparis@redhat.com> Reviewed-by: Paul Moore <paul.moore@hp.com> Signed-off-by: David S. Miller <davem@davemloft.net>