The original discussion is here: https://lore.kernel.org/linux-security-module/16659801547571...@sas1-890ba5c2334a.qloud-c.yandex.net/
Changes in v2: - original patch divided on 2 parts: add __icmp_send function, fix cipso_v4_error - add __ip_option_compile not using icmp_send in case nof error --- include/net/icmp.h | 9 ++++++++- include/net/ip.h | 2 ++ net/ipv4/cipso_ipv4.c | 17 +++++++++++++++-- net/ipv4/icmp.c | 7 ++++--- net/ipv4/ip_options.c | 22 +++++++++++++++++----- 5 files changed, 46 insertions(+), 11 deletions(-)
