tree 907b50534365824858c1df15dbfb4249c1079e4f
parent 4d7cf4a1f49f76f4069114ee08be75cd68c37c5a
author Casey Schaufler <casey@schaufler-ca.com> 1372452427 -0700
committer Casey Schaufler <casey@schaufler-ca.com> 1375412642 -0700

Smack: network label match fix

The Smack code that matches incoming CIPSO tags with Smack labels
reaches through the NetLabel interfaces and compares the network
data with the CIPSO header associated with a Smack label. This was
done in a ill advised attempt to optimize performance. It works
so long as the categories fit in a single capset, but this isn't
always the case.

This patch changes the Smack code to use the appropriate NetLabel
interfaces to compare the incoming CIPSO header with the CIPSO
header associated with a label. It will always match the CIPSO
headers correctly.

Targeted for git://git.gitorious.org/smack-next/kernel.git

Signed-off-by: Casey Schaufler <casey@schaufler-ca.com>