Re: [PATCH 1/1] selinux: Null-out secmark after use

[Venkat Yekkirala <vyekkirala@TrustedCS.com>]

Venkat Yekkirala wrote:
> This nulls out the secmark field on the skb after
> we are done with ALL the access checks in the postroute_last
> hook to handle the case where multicast packets that we send
> might be arriving back to us on a non-loopback device. This
> would cause the flow_in hook to use the secmark on the skb
> (ostensibly from the originating socket) as a security point
> context, which it isn't.
> 
> Signed-off-by: James Morris <jmorris@namei.org>

Actually the sign-off should be (copied and pasted from the wrong email :):

Signed-off-by: Venkat Yekkirala <vyekkirala@TrustedCS.com>

Please disregard this patch.

--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.