Re: [PATCH] Remove extra call to security_sock_rcv_skb()

From: Stephen D. Smalley (sdsat_private)
Date: Wed Mar 26 2003 - 07:00:07 PST

  • Next message: Valdis.Kletnieksat_private: "Re: [PATCH][RFC] Remove kmod_set_label hook" 

    > Drop the extraneous call to security_sock_rcv_skb() in
> net/ipv4/tcp_ipv4.c::tcp_v4_rcv().  This is now handled in
> sk_filter().  Noted by Stephen Smalley.

You can also amend the inline documentation for the hook in security.h,
as has already been done in mainline 2.5, to drop the warning about
TCP_TIME_WAIT, and we can drop the corresponding test in the SELinux
hook function, since the hook is no longer called in that case.

--
Stephen Smalley, NSA


_______________________________________________
linux-security-module mailing list
linux-security-moduleat_private
http://mail.wirex.com/mailman/listinfo/linux-security-module

    This archive was generated by hypermail 2b30 : Wed Mar 26 2003 - 06:53:18 PST