diff options
author | Huw Davies <huw@codeweavers.com> | 2016-06-27 21:06:16 +0200 |
---|---|---|
committer | Paul Moore <paul@paul-moore.com> | 2016-06-27 21:06:16 +0200 |
commit | a04e71f631fa3d2fd2aa0404c11484739d1e9073 (patch) | |
tree | c69ef0d43baa723ea7c62d8e8e35faec0a5067ca /security/smack | |
parent | calipso: Allow the lsm to label the skbuff directly. (diff) | |
download | linux-a04e71f631fa3d2fd2aa0404c11484739d1e9073.tar.xz linux-a04e71f631fa3d2fd2aa0404c11484739d1e9073.zip |
netlabel: Pass a family parameter to netlbl_skbuff_err().
This makes it possible to route the error to the appropriate
labelling engine. CALIPSO is far less verbose than CIPSO
when encountering a bogus packet, so there is no need for a
CALIPSO error handler.
Signed-off-by: Huw Davies <huw@codeweavers.com>
Signed-off-by: Paul Moore <paul@paul-moore.com>
Diffstat (limited to 'security/smack')
-rw-r--r-- | security/smack/smack_lsm.c | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/security/smack/smack_lsm.c b/security/smack/smack_lsm.c index 11f79013ae1f..292fdeaaec7e 100644 --- a/security/smack/smack_lsm.c +++ b/security/smack/smack_lsm.c @@ -3992,7 +3992,7 @@ access_check: rc = smk_bu_note("IPv4 delivery", skp, ssp->smk_in, MAY_WRITE, rc); if (rc != 0) - netlbl_skbuff_err(skb, rc, 0); + netlbl_skbuff_err(skb, sk->sk_family, rc, 0); break; #if IS_ENABLED(CONFIG_IPV6) case PF_INET6: |