From: Eric Paris Date: Tue, 16 Nov 2010 11:52:57 +0000 (+0000) Subject: SELinux: return -ECONNREFUSED from ip_postroute to signal fatal error X-Git-Tag: v2.6.38-rc1~476^2~535 X-Git-Url: http://git.openpandora.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=1f1aaf82825865a50cef0b4722607abb12aeee52;p=pandora-kernel.git SELinux: return -ECONNREFUSED from ip_postroute to signal fatal error The SELinux netfilter hooks just return NF_DROP if they drop a packet. We want to signal that a drop in this hook is a permanant fatal error and is not transient. If we do this the error will be passed back up the stack in some places and applications will get a faster interaction that something went wrong. Signed-off-by: Eric Paris Signed-off-by: David S. Miller --- Reading git-diff-tree failed