[GIT PULL] SELinux fixes for 3.20 #1

[GIT PULL] SELinux fixes for 3.20 #1

[Paul Moore]

Hi James,

A small pull request, just one patch, but an important patch.  This patch 
fixes a nasty problem in NetLabel/CIPSO that causes CIPSO options to go 
undetected, affecting both SELinux and Smack.  Please pull for v3.20.

Thanks,
-Paul

---
The following changes since commit 6eb4e2b41b264f57ee02d16ee61683952945484d:

  SELinux: fix error code in policydb_init() (2015-02-04 11:34:30 -0500)

are available in the git repository at:

  git://git.infradead.org/users/pcmoore/selinux upstream

for you to fetch changes up to 04f81f0154e4bf002be6f4d85668ce1257efa4d9:

  cipso: don't use IPCB() to locate the CIPSO IP option
         (2015-02-11 14:46:37 -0500)

----------------------------------------------------------------
Paul Moore (1):
      cipso: don't use IPCB() to locate the CIPSO IP option

 include/net/cipso_ipv4.h     | 25 ++++++++++++++--------
 net/ipv4/cipso_ipv4.c        | 51 +++++++++++++++++++++++++-----------------
 net/netlabel/netlabel_kapi.c | 15 ++++++++-----
 3 files changed, 56 insertions(+), 35 deletions(-)

Re: [GIT PULL] SELinux fixes for 3.20 #1

[Casey Schaufler]

On 2/11/2015 11:58 AM, Paul Moore wrote:
> Hi James,
>
> A small pull request, just one patch, but an important patch.  This patch 
> fixes a nasty problem in NetLabel/CIPSO that causes CIPSO options to go 
> undetected, affecting both SELinux and Smack.  Please pull for v3.20.

Acked-by: Casey Schaufler <casey@schaufler-ca.com>

>
> Thanks,
> -Paul
>
> ---
> The following changes since commit 6eb4e2b41b264f57ee02d16ee61683952945484d:
>
>   SELinux: fix error code in policydb_init() (2015-02-04 11:34:30 -0500)
>
> are available in the git repository at:
>
>   git://git.infradead.org/users/pcmoore/selinux upstream
>
> for you to fetch changes up to 04f81f0154e4bf002be6f4d85668ce1257efa4d9:
>
>   cipso: don't use IPCB() to locate the CIPSO IP option
>          (2015-02-11 14:46:37 -0500)
>
> ----------------------------------------------------------------
> Paul Moore (1):
>       cipso: don't use IPCB() to locate the CIPSO IP option
>
>  include/net/cipso_ipv4.h     | 25 ++++++++++++++--------
>  net/ipv4/cipso_ipv4.c        | 51 +++++++++++++++++++++++++-----------------
>  net/netlabel/netlabel_kapi.c | 15 ++++++++-----
>  3 files changed, 56 insertions(+), 35 deletions(-)
>
>
> _______________________________________________
> Selinux mailing list
> Selinux@tycho.nsa.gov
> To unsubscribe, send email to Selinux-leave@tycho.nsa.gov.
> To get help, send an email containing "help" to Selinux-request@tycho.nsa.gov.
>

Re: [GIT PULL] SELinux fixes for 3.20 #1

[James Morris]

On Wed, 11 Feb 2015, Paul Moore wrote:

> Hi James,
> 
> A small pull request, just one patch, but an important patch.  This patch 
> fixes a nasty problem in NetLabel/CIPSO that causes CIPSO options to go 
> undetected, affecting both SELinux and Smack.  Please pull for v3.20.
> 
> Thanks,
> -Paul
> 


Pulled.


-- 
James Morris
<jmorris@namei.org>