From: Paul Moore <paul.moore@hp.com>
To: selinux@tycho.nsa.gov
Cc: vyekkirala@TrustedCS.com, jmorris@namei.org
Subject: Cleaning up selinux_socket_getpeersec_dgram()
Date: Tue, 14 Nov 2006 16:58:50 -0500 [thread overview]
Message-ID: <455A3C1A.20209@hp.com> (raw)
Now that IPsec labeling is using the sksec->peer_sid field too I'm working on a
patch to clean up the selinux_socket_getpeersec_{stream,dgram}() functions and I
was wondering if anyone had an objection to replacing
selinux_socket_getpeer_dgram() with selinux_skb_xfrm_sid()?
The actual work done is slightly different but I don't think it's different
enough to cause any problems. The main issue that I see is that
selinux_socket_getpeer_dgram() checks to make sure that the packet is a UDP
packet but I don't think that should cause any problems.
--
paul moore
linux security @ hp
--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.
reply other threads:[~2006-11-14 21:58 UTC|newest]
Thread overview: [no followups] expand[flat|nested] mbox.gz Atom feed
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=455A3C1A.20209@hp.com \
--to=paul.moore@hp.com \
--cc=jmorris@namei.org \
--cc=selinux@tycho.nsa.gov \
--cc=vyekkirala@TrustedCS.com \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.