/* * Implementation of the security services. * * Author : Stephen Smalley, */ #ifndef _SS_SERVICES_H_ #define _SS_SERVICES_H_ #include "policydb.h" #include "sidtab.h" extern struct policydb policydb; void services_compute_xperms_drivers(struct extended_perms *xperms, struct avtab_node *node); void services_compute_xperms_decision(struct extended_perms_decision *xpermd, struct avtab_node *node); #endif /* _SS_SERVICES_H_ */ t-next.git' title='net-next.git Git repository'/>
summaryrefslogtreecommitdiff
fd016cc245a74278cb4d7b89bb3bc'>trace/events/random.h
diff options
AgeCommit message (Expand)AuthorFilesLines
context:
space:
mode:
authorPablo Neira <pablo@netfilter.org>2017-01-26 22:56:21 +0100
committerDavid S. Miller <davem@davemloft.net>2017-01-27 10:33:56 -0500
commit92e55f412cffd016cc245a74278cb4d7b89bb3bc (patch)
treeab90e2e59c82daae60d2c953ef6c780e1f6e5550 /include/trace/events/random.h
parenta47b70ea86bdeb3091341f5ae3ef580f1a1ad822 (diff)
tcp: don't annotate mark on control socket from tcp_v6_send_response()
Unlike ipv4, this control socket is shared by all cpus so we cannot use it as scratchpad area to annotate the mark that we pass to ip6_xmit(). Add a new parameter to ip6_xmit() to indicate the mark. The SCTP socket family caches the flowi6 structure in the sctp_transport structure, so we cannot use to carry the mark unless we later on reset it back, which I discarded since it looks ugly to me. Fixes: bf99b4ded5f8 ("tcp: fix mark propagation with fwmark_reflect enabled") Suggested-by: Eric Dumazet <eric.dumazet@gmail.com> Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org> Signed-off-by: David S. Miller <davem@davemloft.net>
Diffstat (limited to 'include/trace/events/random.h')