net: synack packets can be attached to request sockets
commite446f9dfe17bbaa76a1fe22912636f38be1e1af8
authorEric Dumazet <edumazet@google.com>
Thu, 8 Oct 2015 12:01:55 +0000 (8 05:01 -0700)
committerDavid S. Miller <davem@davemloft.net>
Sun, 11 Oct 2015 12:05:06 +0000 (11 05:05 -0700)
tree8709e6157fe0a20b75dd88340f76f991cd3ae863
parent21d11bd6f0f15c9c782d1f09557bb71f582a3f53
net: synack packets can be attached to request sockets

selinux needs few changes to accommodate fact that SYNACK messages
can be attached to a request socket, lacking sk_security pointer

(Only syncookies are still attached to a TCP_LISTEN socket)

Adds a new sk_listener() helper, and use it in selinux and sch_fq

Fixes: ca6fb0651883 ("tcp: attach SYNACK messages to request sockets instead of listener")
Signed-off-by: Eric Dumazet <edumazet@google.com>
Reported by: kernel test robot <ying.huang@linux.intel.com>
Cc: Paul Moore <paul@paul-moore.com>
Cc: Stephen Smalley <sds@tycho.nsa.gov>
Cc: Eric Paris <eparis@parisplace.org>
Acked-by: Paul Moore <paul@paul-moore.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
include/net/sock.h
net/sched/sch_fq.c
security/selinux/hooks.c