* Cleaning up selinux_socket_getpeersec_dgram()
@ 2006-11-14 21:58 Paul Moore
0 siblings, 0 replies; only message in thread
From: Paul Moore @ 2006-11-14 21:58 UTC (permalink / raw)
To: selinux; +Cc: vyekkirala, jmorris
Now that IPsec labeling is using the sksec->peer_sid field too I'm working on a
patch to clean up the selinux_socket_getpeersec_{stream,dgram}() functions and I
was wondering if anyone had an objection to replacing
selinux_socket_getpeer_dgram() with selinux_skb_xfrm_sid()?
The actual work done is slightly different but I don't think it's different
enough to cause any problems. The main issue that I see is that
selinux_socket_getpeer_dgram() checks to make sure that the packet is a UDP
packet but I don't think that should cause any problems.
--
paul moore
linux security @ hp
--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.
^ permalink raw reply [flat|nested] only message in thread
only message in thread, other threads:[~2006-11-14 21:58 UTC | newest]
Thread overview: (only message) (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2006-11-14 21:58 Cleaning up selinux_socket_getpeersec_dgram() Paul Moore
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.