[NetLabel]: correct improper handling of non-NetLabel peer contexts
authorPaul Moore <paul.moore@hp.com>
Mon, 25 Sep 2006 22:52:01 +0000 (15:52 -0700)
committerDavid S. Miller <davem@davemloft.net>
Mon, 25 Sep 2006 22:52:01 +0000 (15:52 -0700)
commit14a72f53fb1bb5d5c2bdd8cf172219519664729a
tree95a077fb9289a95c352af77f18f12e5aba3313c6
parent597811ec167fa01c926a0957a91d9e39baa30e64
[NetLabel]: correct improper handling of non-NetLabel peer contexts

Fix a problem where NetLabel would always set the value of
sk_security_struct->peer_sid in selinux_netlbl_sock_graft() to the context of
the socket, causing problems when users would query the context of the
connection.  This patch fixes this so that the value in
sk_security_struct->peer_sid is only set when the connection is NetLabel based,
otherwise the value is untouched.

Signed-off-by: Paul Moore <paul.moore@hp.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
include/net/cipso_ipv4.h
include/net/netlabel.h
net/ipv4/cipso_ipv4.c
net/netlabel/netlabel_kapi.c
security/selinux/ss/services.c