tree 68d369f422f98842031ae4ada17e391140165b54
parent eb06acdc85585f28864261f28659157848762ee4
author Eric Paris <eparis@redhat.com> 1290493682 +0000
committer David S. Miller <davem@davemloft.net> 1290538217 -0800

SELinux: Only return netlink error when we know the return is fatal

Some of the SELinux netlink code returns a fatal error when the error might
actually be transient.  This patch just silently drops packets on
potentially transient errors but continues to return a permanant error
indicator when the denial was because of policy.

Based-on-comments-by: Paul Moore <paul.moore@hp.com>
Signed-off-by: Eric Paris <eparis@redhat.com>
Reviewed-by: Paul Moore <paul.moore@hp.com>
Signed-off-by: David S. Miller <davem@davemloft.net>