[GIT PULL] SELinux fixes for 3.13

[GIT PULL] SELinux fixes for 3.13

[Paul Moore]

Hi James,

Here are a few patches to fix problems in 3.13-rcX.  One some memory leak fix 
for patches introduced in 3.13 and four patches to resolve a long standing 
issue with TCP SYN-ACKs.  All of these patches have been part of linux-next 
for at least a day and pass the SELinux testsuite without issue.

Enjoy,
-Paul

---
The following changes since commit 5e01dc7b26d9f24f39abace5da98ccbd6a5ceb52:

  Linux 3.12 (2013-11-03 15:41:51 -0800)

are available in the git repository at:

  git://git.infradead.org/users/pcmoore/selinux_fixes master

for you to fetch changes up to c0828e50485932b7e019df377a6b0a8d1ebd3080:

  selinux: process labeled IPsec TCP SYN-ACK packets properly in
           selinux_ip_postroute() (2013-12-12 17:21:31 -0500)

----------------------------------------------------------------
Geyslan G. Bem (1):
      selinux: fix possible memory leak

Paul Moore (5):
      Merge tag 'v3.12'
      selinux: handle TCP SYN-ACK packets correctly in selinux_ip_output()
      selinux: handle TCP SYN-ACK packets correctly in selinux_ip_postroute()
      selinux: look for IPsec labels on both inbound and outbound packets
      selinux: process labeled IPsec TCP SYN-ACK packets properly in
               selinux_ip_postroute()

 security/selinux/hooks.c        |  137 +++++++++++++++++++++++++++++++-------
 security/selinux/include/xfrm.h |    8 +-
 security/selinux/xfrm.c         |   62 ++++++++++++++----
 3 files changed, 165 insertions(+), 42 deletions(-)

-- 
paul moore
security and virtualization @ redhat


--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.