From mboxrd@z Thu Jan 1 00:00:00 1970 From: James Morris Subject: Re: [PATCH]: Add security check before flushing SAD/SPD Date: Mon, 26 Mar 2007 16:05:17 -0400 (EDT) Message-ID: References: <200703261939.l2QJd7X7012809@faith.austin.ibm.com> Mime-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Cc: netdev@vger.kernel.org, davem@davemloft.net, eparis@redhat.com, selinux@tycho.nsa.gov To: Joy Latten Return-path: Received: from mail1.sea5.speakeasy.net ([69.17.117.3]:38792 "EHLO mail1.sea5.speakeasy.net" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S1750808AbXCZUFV (ORCPT ); Mon, 26 Mar 2007 16:05:21 -0400 In-Reply-To: <200703261939.l2QJd7X7012809@faith.austin.ibm.com> Sender: netdev-owner@vger.kernel.org List-Id: netdev.vger.kernel.org On Mon, 26 Mar 2007, Joy Latten wrote: > Signed-off-by: Joy Latten This looks ok to me, although I have a couple of minor issues (which should probably not stop it being merged): > + if ((err = security_xfrm_policy_delete(pol)) != 0) { The value of 'err' is implicitly inverted several times in this function (and similarly in the state flush one). Something like ret = (fn() != 0); might be better. > + } > + for (i = xfrm_policy_bydst[dir].hmask; i >= 0; i--) { Tab damage? - James -- James Morris