Donate to e Foundation | Murena handsets with /e/OS | Own a part of Murena! Learn more

Commit 2597a834 authored by Alban Crequy's avatar Alban Crequy Committed by Pablo Neira Ayuso
Browse files

netfilter: selinux: switch hook PFs to nfproto 



This patch is a cleanup. Use NFPROTO_* for consistency with other
netfilter code.

Signed-off-by: default avatarAlban Crequy <alban.crequy@collabora.co.uk>
Reviewed-by: default avatarJavier Martinez Canillas <javier.martinez@collabora.co.uk>
Reviewed-by: default avatarVincent Sanders <vincent.sanders@collabora.co.uk>
Signed-off-by: default avatarPablo Neira Ayuso <pablo@netfilter.org>
parent 4c809d63

security/selinux/hooks.c

+5 −5
Original line number Diff line number Diff line
@@ -5763,21 +5763,21 @@ static struct nf_hook_ops selinux_ipv4_ops[] = { 
	{

		.hook =		selinux_ipv4_postroute,

		.owner =	THIS_MODULE,

		.pf =		PF_INET,

		.pf =		NFPROTO_IPV4,

		.hooknum =	NF_INET_POST_ROUTING,

		.priority =	NF_IP_PRI_SELINUX_LAST,

	},

	{

		.hook =		selinux_ipv4_forward,

		.owner =	THIS_MODULE,

		.pf =		PF_INET,

		.pf =		NFPROTO_IPV4,

		.hooknum =	NF_INET_FORWARD,

		.priority =	NF_IP_PRI_SELINUX_FIRST,

	},

	{

		.hook =		selinux_ipv4_output,

		.owner =	THIS_MODULE,

		.pf =		PF_INET,

		.pf =		NFPROTO_IPV4,

		.hooknum =	NF_INET_LOCAL_OUT,

		.priority =	NF_IP_PRI_SELINUX_FIRST,

	}
@@ -5789,14 +5789,14 @@ static struct nf_hook_ops selinux_ipv6_ops[] = { 
	{

		.hook =		selinux_ipv6_postroute,

		.owner =	THIS_MODULE,

		.pf =		PF_INET6,

		.pf =		NFPROTO_IPV6,

		.hooknum =	NF_INET_POST_ROUTING,

		.priority =	NF_IP6_PRI_SELINUX_LAST,

	},

	{

		.hook =		selinux_ipv6_forward,

		.owner =	THIS_MODULE,

		.pf =		PF_INET6,

		.pf =		NFPROTO_IPV6,

		.hooknum =	NF_INET_FORWARD,

		.priority =	NF_IP6_PRI_SELINUX_FIRST,

	}