mirror of
https://github.com/SELinuxProject/selinux
synced 2025-04-01 23:08:09 +00:00
Drop the host bits in the IPV6 address defined via a CIDR notation in define_ipv6_cidr_node_context(), similar to define_ipv4_cidr_node_context(). Otherwise the kernel will never match this entry since the host bits from the actual address will be zeroed before comparison, see security/selinux/ss/services.c:match_ipv6_addrmask(). Signed-off-by: Christian Göttsche <cgzones@googlemail.com> Acked-by: James Carter <jwcart2@gmail.com> |
||
---|---|---|
.. | ||
policy_allonce_mls.conf | ||
policy_allonce_mls.expected_opt.conf | ||
policy_allonce_mls.expected.conf | ||
policy_allonce_xen.conf | ||
policy_allonce_xen.expected_opt.conf | ||
policy_allonce_xen.expected.conf | ||
policy_allonce.conf | ||
policy_allonce.expected_opt.conf | ||
policy_allonce.expected.conf | ||
policy_minimal_mls.conf | ||
policy_minimal.conf | ||
test_roundtrip.sh |