Re: [PATCH 2nd revision] Add SELinux context support to AUDIT target

Pablo Neira Ayuso
2011-06-06T23:22:43Z

On 06/06/11 15:10, Mr Dash Four wrote:
>
>> Exactly my point. There is no leak if its text or numeric.
>>
> No, there is no leak if it is a text, but there *is* a leak if it is a
> numeric. I think I've made that quite clear.

We don't use numeric secmark anymore in nf_conntrack. Not very familiar
with SELinux, but I remember that the convention was not to provide
internal numeric values.