Skip to content

Fix the SELinux dynamic network access controls

Paul Moore netdev selinux 3 versions – In review

Get series with b4
b4 am 20130529173336.31888.29695.stgit@localhost

Versions newest first · linked by author and title

  1. v3 Latest2 patches 2 repliesIn review
  2. v22 patches 2 repliesSuperseded
  3. v1 RFC2 patches 2 repliesSuperseded

Patches in v3 No applies recorded yet

#Subject and filesSizeRepliesApplied
1/2xfrm: force a garbage collection after deleting a policyinclude/net/xfrm.h net/key/af_key.c net/xfrm/xfrm_policy.c +1 more+13 -10 replies
2/2selinux: fix the labeled xfrm/IPsec reference count handlingsecurity/selinux/xfrm.c+14 -200 replies

Reviews trailers per patch

No Reviewed-by, Acked-by or Tested-by trailers for v3 yet.

Read the v3 thread

Cover letter [PATCH v3 0/2] Fix the SELinux dynamic network access controls

Take #3 ... two changes here: the first is a simple reordering of the two patches and the second is stripping the SELinux patch (2/2 in this patchset) of everything but the bare bones changes needed to fix the problem in the 3.10-rcX tree.

Enjoy.

---

Paul Moore (2):
xfrm: force a garbage collection after deleting a policy
selinux: fix the labeled xfrm/IPsec reference count handling

 include/net/xfrm.h      |    5 +++++
 net/key/af_key.c        |    4 ++++
 net/xfrm/xfrm_policy.c  |    3 ++-
 net/xfrm/xfrm_user.c    |    2 ++
 security/selinux/xfrm.c |   34 ++++++++++++++--------------------
 5 files changed, 27 insertions(+), 21 deletions(-)

Read the cover letter in its thread