Skip to content
Commit a7a91a19 authored by Paul Moore's avatar Paul Moore
Browse files

selinux: fix a problem with IPv6 traffic denials in selinux_ip_postroute()

A previous commit c0828e50

 ("selinux:
process labeled IPsec TCP SYN-ACK packets properly in
selinux_ip_postroute()") mistakenly left out a 'break' from a switch
statement which caused problems with IPv6 traffic.

Thanks to Florian Westphal for reporting and debugging the issue.

Reported-by: default avatarFlorian Westphal <fwestpha@redhat.com>
Signed-off-by: default avatarPaul Moore <pmoore@redhat.com>
parent 7b0d0b40
0% or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment