[Swan-commit] Changes to ref refs/heads/main
Paul Wouters
paul at vault.libreswan.fi
Thu Mar 4 18:02:14 UTC 2021
New commits:
commit 321fa52b5e0b868c552b770d1396d1b0a27f411e
Author: Kavinda Wewegama <kavinda.wewegama at forcepointgov.com>
Date: Thu Mar 4 13:01:22 2021 -0500
pluto: remove equality check involving SELinux labels
* Any decision involving SELinux labels should always be SELinux policy driven.
** Therefore, `pluto` should never do equality checks on labels.
* In the case of `within_range()`, there is no guarantee that a label is
allowed to `polmatch` against itself.
** Hence, there should not be a `hunk_eq()` call.
Signed-off-by: Paul Wouters <pwouters at redhat.com>
More information about the Swan-commit
mailing list