Eric Paris 1f1aaf8282 SELinux: return -ECONNREFUSED from ip_postroute to signal fatal error ... The SELinux netfilter hooks just return NF_DROP if they drop a packet. We want to signal that a drop in this hook is a permanant fatal error and is not transient. If we do this the error will be passed back up the stack in some places and applications will get a faster interaction that something went wrong. Signed-off-by: Eric Paris <eparis@redhat.com> Signed-off-by: David S. Miller <davem@davemloft.net>		2010-11-17 10:54:35 -08:00
..
apparmor	APPARMOR: Fix memory leak of apparmor_init()	2010-11-11 07:36:22 +11:00
integrity/ima	IMA: fix the ToMToU logic	2010-10-26 11:37:19 -07:00
keys	Fix install_process_keyring error handling	2010-10-28 09:02:15 -07:00
selinux	SELinux: return -ECONNREFUSED from ip_postroute to signal fatal error	2010-11-17 10:54:35 -08:00
smack	convert get_sb_single() users	2010-10-29 04:16:28 -04:00
tomoyo	fs: take dcache_lock inside __d_path	2010-10-25 21:26:12 -04:00
capability.c	secmark: make secmark object handling generic	2010-10-21 10:12:48 +11:00
commoncap.c	Restrict unprivileged access to kernel syslog	2010-11-12 07:55:32 -08:00
device_cgroup.c	Merge branch 'master' into next	2010-05-06 10:56:07 +10:00
inode.c	convert get_sb_single() users	2010-10-29 04:16:28 -04:00
Kconfig	Restrict unprivileged access to kernel syslog	2010-11-12 07:55:32 -08:00
lsm_audit.c	Merge branch 'master' into next	2010-05-06 10:56:07 +10:00
Makefile	AppArmor: Enable configuring and building of the AppArmor security module	2010-08-02 15:38:34 +10:00
min_addr.c	mmap_min_addr check CAP_SYS_RAWIO only for write	2010-04-23 08:56:31 +10:00
security.c	Merge branch 'ima-memory-use-fixes'	2010-10-26 11:37:48 -07:00