>>SELinux Mailing List: by thread

• Contemporary messages sorted: [ by date ] [ by thread ] [ by subject ] [ by author ]

From: Stephen Smalley <sds_at_tislabs.com>
subject: [PATCH] Fix for selinux_ip_postroute hook
Date: Tue, 4 Sep 2001 12:13:26 -0400 (EDT)

• This message: [ Message body ]
• Next message: Stephen Smalley: "Re: Summary of posted bug fix and optional patches"
• Previous message: Paul Rolland: "RE: Question regarding security policy configuration"

I've attached a patch for selinux/module/selinux_plug/hooks.c that fixes a bug in the selinux_ip_postroute hook that was causing the copy of multicast or broadcast packets destined for local processes to be dropped. To apply this patch, save it to hooks.patch, change to the selinux directory, and run 'patch -p1 < hooks.patch'. This patch will be included in the next release.

--

Stephen D. Smalley, NAI Labs
ssmalley@nai.com

Index: selinux/module/selinux_plug/hooks.c diff -u selinux/module/selinux_plug/hooks.c:1.122 selinux/module/selinux_plug/hooks.c:1.123
--- selinux/module/selinux_plug/hooks.c:1.122 Fri Aug 31 10:17:32 2001
+++ selinux/module/selinux_plug/hooks.c Fri Aug 31 14:22:04 2001 @@ -2682,9 +2682,7 @@

         }  

 	if (sk == NULL) {
-		printk("selinux_ip_postroute: sk is null\n");
-/* 		nf_dump_skb(PF_INET, skb); */
-		return NF_DROP;
+		return NF_ACCEPT;
 	}
 	sock = sk->socket;
 

--

You have received this message because you are subscribed to the selinux list. If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with the words "unsubscribe selinux" without quotes as the message.

• Contemporary messages sorted: [ by date ] [ by thread ] [ by subject ] [ by author ]

This archive was generated by hypermail 2.2.0 on Wed 11 Jun 2008 - 08:10:54 EDT