From 38d90ac27d218cdfa20e2ea90672da9e44840195 Mon Sep 17 00:00:00 2001 From: Eric Paris Date: Tue, 23 Nov 2010 06:28:08 +0000 Subject: [PATCH] --- yaml --- r: 224475 b: refs/heads/master c: 2fe66ec242d3f76e3b0101f36419e7e5405bcff3 h: refs/heads/master i: 224473: 7284fb682765dae7edb608fcc787d70b8c47efea 224471: dfeb548ec14b45a3d2dce1fc7b92f87dcfd0b52d v: v3 --- [refs] | 2 +- trunk/security/selinux/hooks.c | 4 ++-- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/[refs] b/[refs] index fcee3cf54b12..2853f6d7380f 100644 --- a/[refs] +++ b/[refs] @@ -1,2 +1,2 @@ --- -refs/heads/master: 04f6d70f6e64900a5d70a5fc199dd9d5fa787738 +refs/heads/master: 2fe66ec242d3f76e3b0101f36419e7e5405bcff3 diff --git a/trunk/security/selinux/hooks.c b/trunk/security/selinux/hooks.c index f590fb8e9143..156ef93d6f7d 100644 --- a/trunk/security/selinux/hooks.c +++ b/trunk/security/selinux/hooks.c @@ -4524,11 +4524,11 @@ static unsigned int selinux_ip_postroute_compat(struct sk_buff *skb, if (selinux_secmark_enabled()) if (avc_has_perm(sksec->sid, skb->secmark, SECCLASS_PACKET, PACKET__SEND, &ad)) - return NF_DROP; + return NF_DROP_ERR(-ECONNREFUSED); if (selinux_policycap_netpeer) if (selinux_xfrm_postroute_last(sksec->sid, skb, &ad, proto)) - return NF_DROP; + return NF_DROP_ERR(-ECONNREFUSED); return NF_ACCEPT; }