netlabel: Prevent setsockopt() from changing the hop-by-hop option.

Browse source

If a socket has a netlabel in place then don't let setsockopt() alter
the socket's IPv6 hop-by-hop option.  This is in the same spirit as
the existing check for IPv4.

Signed-off-by: Huw Davies <huw@codeweavers.com>
Signed-off-by: Paul Moore <paul@paul-moore.com>

...

This commit is contained in:

Huw Davies 2016-06-27 15:05:27 -04:00 • committed by Paul Moore

parent ceba1832b1

commit 1f440c99d3

1 changed files with 16 additions and 1 deletions

Show all changes Ignore whitespace when comparing lines Ignore changes in amount of whitespace Ignore changes in whitespace at EOL

Download patch file Download diff file Expand all files Collapse all files

17

security/selinux/netlabel.c

View file