Eric Paris 1f1aaf8282 SELinux: return -ECONNREFUSED from ip_postroute to signal fatal error ...

The SELinux netfilter hooks just return NF_DROP if they drop a packet.  We
want to signal that a drop in this hook is a permanant fatal error and is not
transient.  If we do this the error will be passed back up the stack in some
places and applications will get a faster interaction that something went
wrong.

Signed-off-by: Eric Paris <eparis@redhat.com>
Signed-off-by: David S. Miller <davem@davemloft.net>

2010-11-17 10:54:35 -08:00

..

apparmor

APPARMOR: Fix memory leak of apparmor_init()

2010-11-11 07:36:22 +11:00

integrity/ima

IMA: fix the ToMToU logic

2010-10-26 11:37:19 -07:00

keys

Fix install_process_keyring error handling

2010-10-28 09:02:15 -07:00

selinux

SELinux: return -ECONNREFUSED from ip_postroute to signal fatal error

2010-11-17 10:54:35 -08:00

smack

convert get_sb_single() users

2010-10-29 04:16:28 -04:00

tomoyo

fs: take dcache_lock inside __d_path

2010-10-25 21:26:12 -04:00

capability.c

secmark: make secmark object handling generic

2010-10-21 10:12:48 +11:00

commoncap.c

Restrict unprivileged access to kernel syslog

2010-11-12 07:55:32 -08:00

device_cgroup.c

Merge branch 'master' into next

2010-05-06 10:56:07 +10:00

inode.c

convert get_sb_single() users

2010-10-29 04:16:28 -04:00

Kconfig

Restrict unprivileged access to kernel syslog

2010-11-12 07:55:32 -08:00

lsm_audit.c

Merge branch 'master' into next

2010-05-06 10:56:07 +10:00

Makefile

AppArmor: Enable configuring and building of the AppArmor security module

2010-08-02 15:38:34 +10:00

min_addr.c

…

security.c

Merge branch 'ima-memory-use-fixes'

2010-10-26 11:37:48 -07:00