| commit | 817eff718dca4e54d5721211ddde0914428fbb7c | [log] [tgz] |
|---|---|---|
| author | Paul Moore <pmoore@redhat.com> | Tue Dec 10 14:57:54 2013 -0500 |
| committer | Paul Moore <pmoore@redhat.com> | Thu Dec 12 17:21:31 2013 -0500 |
| tree | af7ee8d6ca454532624c7148e9f96bd1a67c0cb3 | |
| parent | 446b802437f285de68ffb8d6fac3c44c3cab5b04 [diff] |
selinux: look for IPsec labels on both inbound and outbound packets Previously selinux_skb_peerlbl_sid() would only check for labeled IPsec security labels on inbound packets, this patch enables it to check both inbound and outbound traffic for labeled IPsec security labels. Reported-by: Janak Desai <Janak.Desai@gtri.gatech.edu> Cc: stable@vger.kernel.org Signed-off-by: Paul Moore <pmoore@redhat.com>