selinux: Fix wrong checks for selinux_policycap_netpeer
authorSteffen Klassert <steffen.klassert@secunet.com>
Wed, 23 Feb 2011 11:55:21 +0000 (12:55 +0100)
committerEric Paris <eparis@redhat.com>
Fri, 25 Feb 2011 20:00:47 +0000 (15:00 -0500)
commitb9679a76187694138099e09d7f5091b73086e6d7
tree224bfa579013b55ed6c459879ba0aab6d28e8ae2
parent8f82a6880d8d03961181d973388e1df2772a8b24
selinux: Fix wrong checks for selinux_policycap_netpeer

selinux_sock_rcv_skb_compat and selinux_ip_postroute_compat are just
called if selinux_policycap_netpeer is not set. However in these
functions we check if selinux_policycap_netpeer is set. This leads
to some dead code and to the fact that selinux_xfrm_postroute_last
is never executed. This patch removes the dead code and the checks
for selinux_policycap_netpeer in the compatibility functions.

Signed-off-by: Steffen Klassert <steffen.klassert@secunet.com>
Acked-by: Paul Moore <paul.moore@hp.com>
Signed-off-by: Eric Paris <eparis@redhat.com>
security/selinux/hooks.c