From: James Morris <[EMAIL PROTECTED]> Date: Wed, 28 Feb 2007 15:45:07 -0500 (EST)
> On Wed, 28 Feb 2007, Paul Moore wrote: > > > The current CIPSO engine has a problem where it does not verify that the > > given > > sensitivity level has a valid CIPSO mapping when the "std" CIPSO DOI type is > > used. The end result is that bad packets are sent on the wire which should > > have never been sent in the first place. This patch corrects this problem > > by > > verifying the sensitivity level mapping similar to what is done with the > > category mapping. This patch also changes the returned error code in this > > case > > to -EPERM to better match what the category mapping verification code > > returns. > > > > Signed-off-by: Paul Moore <[EMAIL PROTECTED]> > > [removed redhat-lspp, which is subscriber only] > > Acked-by: James Morris <[EMAIL PROTECTED]> Applied, thanks everyone. If -stable inclusion is desired, please submit this patch there. You can add my signoff if you want: Signed-off-by: David S. Miller <[EMAIL PROTECTED]> - To unsubscribe from this list: send the line "unsubscribe netdev" in the body of a message to [EMAIL PROTECTED] More majordomo info at http://vger.kernel.org/majordomo-info.html