Paul Moore wrote:
On Tuesday 16 September 2008 8:55:48 am Paul Moore wrote:
Another revision to the patchset to fix two issues, one trivial, the
other not so much. The trivial fix was to add some locking around
the connection labeling operations, we're messing with the socket so
we should make sure we lock it like we do everywhere else. The
second fix was to ensure that we sync up a stream socket's MSS value
when we add IP options to the socket. We were doing everything
correctly on the client side, but the server side was a bit of a
mess; I'm pretty happy with this fix as I think it actually makes the
code a bit cleaner in some respects and I believe actually shrinks
the size of the diff slightly (a good sign).
A special thanks to Joe Nall and John Wiseman for helping debug the
MSS problem.
I've updated both the git trees earlier today so hopefully the next
cut of the linux-next tree should have the latest bits.
* git://git.infradead.org/users/pcmoore/lblnet-2.6_testing
I forgot to add, there is also a small fix to the
cipso_v4_sock_delattr() function so that it correctly removes the CIPSO
option and either adjust the option padding correctly or removes the
options struct entirely from the socket if it is no longer needed.
Thanks to Casey Schaufler for finding this bug
Testing in progress. Thank you.
--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@xxxxxxxxxxxxx with
the words "unsubscribe selinux" without quotes as the message.
