From: Eric Paris <eparis@redhat.com>
Date: Tue, 23 Nov 2010 06:28:02 +0000 (+0000)
Subject: SELinux: Only return netlink error when we know the return is fatal
X-Git-Tag: v2.6.38-rc1~476^2~476
X-Git-Url: http://git.openpandora.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=04f6d70f6e64900a5d70a5fc199dd9d5fa787738;p=pandora-kernel.git

SELinux: Only return netlink error when we know the return is fatal

Some of the SELinux netlink code returns a fatal error when the error might
actually be transient.  This patch just silently drops packets on
potentially transient errors but continues to return a permanant error
indicator when the denial was because of policy.

Based-on-comments-by: Paul Moore <paul.moore@hp.com>
Signed-off-by: Eric Paris <eparis@redhat.com>
Reviewed-by: Paul Moore <paul.moore@hp.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
---

Reading git-diff-tree failed