tmp_suning_uos_patched/security
Eric Paris 1f1aaf8282 SELinux: return -ECONNREFUSED from ip_postroute to signal fatal error
The SELinux netfilter hooks just return NF_DROP if they drop a packet.  We
want to signal that a drop in this hook is a permanant fatal error and is not
transient.  If we do this the error will be passed back up the stack in some
places and applications will get a faster interaction that something went
wrong.

Signed-off-by: Eric Paris <eparis@redhat.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
2010-11-17 10:54:35 -08:00
..
apparmor APPARMOR: Fix memory leak of apparmor_init() 2010-11-11 07:36:22 +11:00
integrity/ima IMA: fix the ToMToU logic 2010-10-26 11:37:19 -07:00
keys Fix install_process_keyring error handling 2010-10-28 09:02:15 -07:00
selinux SELinux: return -ECONNREFUSED from ip_postroute to signal fatal error 2010-11-17 10:54:35 -08:00
smack convert get_sb_single() users 2010-10-29 04:16:28 -04:00
tomoyo fs: take dcache_lock inside __d_path 2010-10-25 21:26:12 -04:00
capability.c secmark: make secmark object handling generic 2010-10-21 10:12:48 +11:00
commoncap.c Restrict unprivileged access to kernel syslog 2010-11-12 07:55:32 -08:00
device_cgroup.c Merge branch 'master' into next 2010-05-06 10:56:07 +10:00
inode.c convert get_sb_single() users 2010-10-29 04:16:28 -04:00
Kconfig Restrict unprivileged access to kernel syslog 2010-11-12 07:55:32 -08:00
lsm_audit.c Merge branch 'master' into next 2010-05-06 10:56:07 +10:00
Makefile AppArmor: Enable configuring and building of the AppArmor security module 2010-08-02 15:38:34 +10:00
min_addr.c mmap_min_addr check CAP_SYS_RAWIO only for write 2010-04-23 08:56:31 +10:00
security.c Merge branch 'ima-memory-use-fixes' 2010-10-26 11:37:48 -07:00