Eric Paris 16bec31db7 [IPSEC]: xfrm audit hook misplaced in pfkey_delete and xfrm_del_sa ...

Inside pfkey_delete and xfrm_del_sa the audit hooks were not called if
there was any permission/security failures in attempting to do the del
operation (such as permission denied from security_xfrm_state_delete).
This patch moves the audit hook to the exit path such that all failures
(and successes) will actually get audited.

Signed-off-by: Eric Paris <eparis@redhat.com>
Acked-by: Venkat Yekkirala <vyekkirala@trustedcs.com>
Acked-by: James Morris <jmorris@namei.org>
Signed-off-by: David S. Miller <davem@davemloft.net>

2007-03-07 16:08:11 -08:00

..

Kconfig

…

Makefile

…

xfrm_algo.c

…

xfrm_hash.c

…

xfrm_hash.h

…

xfrm_input.c

…

xfrm_policy.c

[IPSEC]: xfrm_policy delete security check misplaced

2007-03-07 16:08:09 -08:00

xfrm_state.c

…

xfrm_user.c

[IPSEC]: xfrm audit hook misplaced in pfkey_delete and xfrm_del_sa

2007-03-07 16:08:11 -08:00