On Thu, Aug 1, 2019 at 5:55 PM Paul Moore <paul@xxxxxxxxxxxxxx> wrote: > > Previously if we couldn't find an entry in the cache and we failed to > allocate memory for a new cache entry we would fail the network object > label lookup; this is obviously not ideal. This patch fixes this so > that we return the object label even if we can't cache the object at > this point in time due to memory pressure. > > The GitHub issue tracker is below: > * https://github.com/SELinuxProject/selinux-kernel/issues/3 > > Signed-off-by: Paul Moore <paul@xxxxxxxxxxxxxx> > --- > security/selinux/netif.c | 31 +++++++++++++------------------ > security/selinux/netnode.c | 30 ++++++++++++++---------------- > security/selinux/netport.c | 24 +++++++++++------------- > 3 files changed, 38 insertions(+), 47 deletions(-) No objections here either so I'm going to merge this into selinux/next. -- paul moore www.paul-moore.com