Re: [PATCH] selinux: always return a secid from the network caches if we find one

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



On Thu, Aug 1, 2019 at 5:55 PM Paul Moore <paul@xxxxxxxxxxxxxx> wrote:
>
> Previously if we couldn't find an entry in the cache and we failed to
> allocate memory for a new cache entry we would fail the network object
> label lookup; this is obviously not ideal.  This patch fixes this so
> that we return the object label even if we can't cache the object at
> this point in time due to memory pressure.
>
> The GitHub issue tracker is below:
>  * https://github.com/SELinuxProject/selinux-kernel/issues/3
>
> Signed-off-by: Paul Moore <paul@xxxxxxxxxxxxxx>
> ---
>  security/selinux/netif.c   |   31 +++++++++++++------------------
>  security/selinux/netnode.c |   30 ++++++++++++++----------------
>  security/selinux/netport.c |   24 +++++++++++-------------
>  3 files changed, 38 insertions(+), 47 deletions(-)

No objections here either so I'm going to merge this into selinux/next.

-- 
paul moore
www.paul-moore.com



[Index of Archives]     [Selinux Refpolicy]     [Linux SGX]     [Fedora Users]     [Fedora Desktop]     [Yosemite Photos]     [Yosemite Camping]     [Yosemite Campsites]     [KDE Users]     [Gnome Users]

  Powered by Linux