[MLSXFRM]: Default labeling of socket specific IPSec policies
This defaults the label of socket-specific IPSec policies to be the same as the socket they are set on. Signed-off-by: Venkat Yekkirala <vyekkirala@TrustedCS.com> Signed-off-by: David S. Miller <davem@davemloft.net>
This commit is contained in:
committed by
David S. Miller
parent
beb8d13bed
commit
cb969f072b
@@ -1026,7 +1026,7 @@ int xfrm_user_policy(struct sock *sk, int optname, u8 __user *optval, int optlen
|
||||
err = -EINVAL;
|
||||
read_lock(&xfrm_km_lock);
|
||||
list_for_each_entry(km, &xfrm_km_list, list) {
|
||||
pol = km->compile_policy(sk->sk_family, optname, data,
|
||||
pol = km->compile_policy(sk, optname, data,
|
||||
optlen, &err);
|
||||
if (err >= 0)
|
||||
break;
|
||||
|
||||
Reference in New Issue
Block a user