Re: [PATCH] Remove extra call to security_sock_rcv_skb()

From: Stephen D. Smalley (sdsat_private)
Date: Wed Mar 26 2003 - 07:00:07 PST

  • Next message: Valdis.Kletnieksat_private: "Re: [PATCH][RFC] Remove kmod_set_label hook"

    > Drop the extraneous call to security_sock_rcv_skb() in
    > net/ipv4/tcp_ipv4.c::tcp_v4_rcv().  This is now handled in
    > sk_filter().  Noted by Stephen Smalley.
    You can also amend the inline documentation for the hook in security.h,
    as has already been done in mainline 2.5, to drop the warning about
    TCP_TIME_WAIT, and we can drop the corresponding test in the SELinux
    hook function, since the hook is no longer called in that case.
    Stephen Smalley, NSA
    linux-security-module mailing list

    This archive was generated by hypermail 2b30 : Wed Mar 26 2003 - 06:53:18 PST