OpenE2K
/
linux
6
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity
linux/security
History
Eric Paris 1f1aaf8282 SELinux: return -ECONNREFUSED from ip_postroute to signal fatal error 
The SELinux netfilter hooks just return NF_DROP if they drop a packet.  We
want to signal that a drop in this hook is a permanant fatal error and is not
transient.  If we do this the error will be passed back up the stack in some
places and applications will get a faster interaction that something went
wrong.

Signed-off-by: Eric Paris <eparis@redhat.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
 		2010-11-17 10:54:35 -08:00
..
apparmor APPARMOR: Fix memory leak of apparmor_init() 2010-11-11 07:36:22 +11:00
integrity/ima IMA: fix the ToMToU logic 2010-10-26 11:37:19 -07:00
keys Fix install_process_keyring error handling 2010-10-28 09:02:15 -07:00
selinux SELinux: return -ECONNREFUSED from ip_postroute to signal fatal error 2010-11-17 10:54:35 -08:00
smack convert get_sb_single() users 2010-10-29 04:16:28 -04:00
tomoyo fs: take dcache_lock inside __d_path 2010-10-25 21:26:12 -04:00
Kconfig Restrict unprivileged access to kernel syslog 2010-11-12 07:55:32 -08:00
Makefile
…
capability.c secmark: make secmark object handling generic 2010-10-21 10:12:48 +11:00
commoncap.c Restrict unprivileged access to kernel syslog 2010-11-12 07:55:32 -08:00
device_cgroup.c
…
inode.c convert get_sb_single() users 2010-10-29 04:16:28 -04:00
lsm_audit.c
…
min_addr.c
…
security.c Merge branch 'ima-memory-use-fixes' 2010-10-26 11:37:48 -07:00