Re: [RFC PATCH v6 12/16] selinux: Set socket NetLabel based on connection endpoint

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 




On Oct 1, 2008, at 5:00 AM, James Morris wrote:

On Tue, 16 Sep 2008, Paul Moore wrote:

/**
+ * cipso_v4_sock_delattr - Delete the CIPSO option from a socket
+ * @sk: the socket
+ *
+ * Description:
+ * Removes the CIPSO option from a socket, if present.
+ *
+ */
+void cipso_v4_sock_delattr(struct sock *sk)

Reviewed-by: James Morris <jmorris@xxxxxxxxx>


Btw, what kind of testing has this patch had?

Paul generated a patch for us against 2.6.26-5 that we have on about 20 developer and test boxes with good results in MLS enforcing. We are adding IPSec between machines and static fallback labels to the test mix and will report any issues. We have a couple of 8 core machines I'll stress test on to look for SMP issues.

joe



--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@xxxxxxxxxxxxx with
the words "unsubscribe selinux" without quotes as the message.

[Index of Archives]     [Selinux Refpolicy]     [Linux SGX]     [Fedora Users]     [Fedora Desktop]     [Yosemite Photos]     [Yosemite Camping]     [Yosemite Campsites]     [KDE Users]     [Gnome Users]

  Powered by Linux