diff options
author | Eric Paris <eparis@redhat.com> | 2010-11-16 11:52:57 +0000 |
---|---|---|
committer | David S. Miller <davem@davemloft.net> | 2010-11-17 10:54:35 -0800 |
commit | 1f1aaf82825865a50cef0b4722607abb12aeee52 (patch) | |
tree | 9ab2495097fa2944404ab41bfb3038de374f5626 /drivers/isdn | |
parent | ee58681195bf243bafc44ca53f3c24429d096cce (diff) | |
download | linux-stable-1f1aaf82825865a50cef0b4722607abb12aeee52.tar.gz linux-stable-1f1aaf82825865a50cef0b4722607abb12aeee52.tar.bz2 linux-stable-1f1aaf82825865a50cef0b4722607abb12aeee52.zip |
SELinux: return -ECONNREFUSED from ip_postroute to signal fatal error
The SELinux netfilter hooks just return NF_DROP if they drop a packet. We
want to signal that a drop in this hook is a permanant fatal error and is not
transient. If we do this the error will be passed back up the stack in some
places and applications will get a faster interaction that something went
wrong.
Signed-off-by: Eric Paris <eparis@redhat.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
Diffstat (limited to 'drivers/isdn')
0 files changed, 0 insertions, 0 deletions