Message ID | 1290179515.8839.41.camel@sifl |
---|---|
State | RFC, archived |
Delegated to: | David Miller |
Headers | show |
diff --git a/security/selinux/hooks.c b/security/selinux/hooks.c index 65fa8bf..de1b79e 100644 --- a/security/selinux/hooks.c +++ b/security/selinux/hooks.c @@ -4520,11 +4520,11 @@ static unsigned int selinux_ip_postroute_compat(struct sk_buff *skb, if (selinux_secmark_enabled()) if (avc_has_perm(sksec->sid, skb->secmark, SECCLASS_PACKET, PACKET__SEND, &ad)) - return NF_DROP; + return NF_DROP_ERR(-ECONNREFUSED); if (selinux_policycap_netpeer) if (selinux_xfrm_postroute_last(sksec->sid, skb, &ad, proto)) - return NF_DROP; + return NF_DROP_ERR(-ECONNREFUSED); return NF_ACCEPT; }