diff options
| author | Florian Westphal <fw@strlen.de> | 2021-10-11 16:33:09 +0200 |
|---|---|---|
| committer | Casey Schaufler <casey@schaufler-ca.com> | 2021-10-12 08:23:52 -0700 |
| commit | f8de49ef925222135aff23f13344c1a907d88a41 (patch) | |
| tree | 1447a11ed629e0e180f22ef7bb686138a6e2b37c /security/smack | |
| parent | 387ef964460f14fe1c1ea29aba70e22731ea7cf7 (diff) | |
| download | linux-rpi-f8de49ef925222135aff23f13344c1a907d88a41.tar.gz linux-rpi-f8de49ef925222135aff23f13344c1a907d88a41.tar.bz2 linux-rpi-f8de49ef925222135aff23f13344c1a907d88a41.zip | |
smack: remove duplicated hook function
ipv4 and ipv6 hook functions are identical, remove one.
Signed-off-by: Florian Westphal <fw@strlen.de>
Signed-off-by: Casey Schaufler <casey@schaufler-ca.com>
Diffstat (limited to 'security/smack')
| -rw-r--r-- | security/smack/smack_netfilter.c | 26 |
1 files changed, 3 insertions, 23 deletions
diff --git a/security/smack/smack_netfilter.c b/security/smack/smack_netfilter.c index fc7399b45373..b945c1d3a743 100644 --- a/security/smack/smack_netfilter.c +++ b/security/smack/smack_netfilter.c @@ -18,27 +18,7 @@ #include <net/net_namespace.h> #include "smack.h" -#if IS_ENABLED(CONFIG_IPV6) - -static unsigned int smack_ipv6_output(void *priv, - struct sk_buff *skb, - const struct nf_hook_state *state) -{ - struct sock *sk = skb_to_full_sk(skb); - struct socket_smack *ssp; - struct smack_known *skp; - - if (sk && sk->sk_security) { - ssp = sk->sk_security; - skp = ssp->smk_out; - skb->secmark = skp->smk_secid; - } - - return NF_ACCEPT; -} -#endif /* IPV6 */ - -static unsigned int smack_ipv4_output(void *priv, +static unsigned int smack_ip_output(void *priv, struct sk_buff *skb, const struct nf_hook_state *state) { @@ -57,14 +37,14 @@ static unsigned int smack_ipv4_output(void *priv, static const struct nf_hook_ops smack_nf_ops[] = { { - .hook = smack_ipv4_output, + .hook = smack_ip_output, .pf = NFPROTO_IPV4, .hooknum = NF_INET_LOCAL_OUT, .priority = NF_IP_PRI_SELINUX_FIRST, }, #if IS_ENABLED(CONFIG_IPV6) { - .hook = smack_ipv6_output, + .hook = smack_ip_output, .pf = NFPROTO_IPV6, .hooknum = NF_INET_LOCAL_OUT, .priority = NF_IP6_PRI_SELINUX_FIRST, |