Re: [PATCH 1/1] NetLabel: secid reconciliation support

2006-09-29 Thread Paul Moore
Venkat Yekkirala wrote: >>@@ -3672,16 +3674,20 @@ static int selinux_skb_flow_in(struct sk >> if (err) >> goto out; >> >>- if (xfrm_sid) { >>- err = security_transition_sid(xfrm_sid, skb->secmark, >>- >>SECCLASS_PACKET,

RE: [PATCH 1/1] NetLabel: secid reconciliation support

2006-09-29 Thread Venkat Yekkirala
> @@ -3672,16 +3674,20 @@ static int selinux_skb_flow_in(struct sk > if (err) > goto out; > > - if (xfrm_sid) { > - err = security_transition_sid(xfrm_sid, skb->secmark, > - > SECCLASS_PACKET, &trans_sid); > -

[PATCH 1/1] NetLabel: secid reconciliation support

2006-09-29 Thread paul . moore
This patch provides the missing NetLabel support to the secid reconciliation patchset. Signed-off-by: Paul Moore <[EMAIL PROTECTED]> --- security/selinux/hooks.c| 51 security/selinux/include/objsec.h |1 security/selinux/include/s