[GIT] SELinux: fix regression in netlabel

This fixes a regression in the SELinux Netlabel code, where, if enabled, it stops users from setting IP options for unlabeled packets, which it should not do. There's also a documentation fix.

Please pull.

The following changes since commit 683fdc5fe5fec5c4f27eb58a8781f212f50c8e01:   Linus Torvalds (1):

        Merge branch 'core/urgent' of git://git.kernel.org/.../tip/linux-2.6-tip

are available in the git repository at:

  git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/security-testing-2.6 for-linus

Paul Moore (2): cipso: Fix documentation comment selinux: Fix the NetLabel glue code for setsockopt() net/ipv4/cipso_ipv4.c | 9 +++++++--  security/selinux/netlabel.c | 4 +++-  2 files changed, 10 insertions(+), 3 deletions(-) -- James Morris <jmorris@namei.org> -- To unsubscribe from this list: send the line "unsubscribe linux-security-module" in the body of a message to majordomo@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html

• This message: [ Message body ]
• Next message: Markku Savela: "How to force change of real uid in kernel?"
• Previous message: James Morris: "Re: Tomoyo & securityfs"

• Contemporary messages sorted: [ By Date ] [ By Thread ] [ By Subject ] [ By Author ]