| commit | 4342f70538b929b188c6e370fe24a155e6532eb2 | [log] [tgz] |
|---|---|---|
| author | Florian Westphal <fw@strlen.de> | Mon Oct 11 22:22:29 2021 +0200 |
| committer | Paul Moore <paul@paul-moore.com> | Mon Oct 11 17:44:00 2021 -0400 |
| tree | 1f6045e6cadc1d2e8d55c957d55a50b3f4d9fdee | |
| parent | f5d0e5e9d72d3a06018efbfa3adccc0e09a129f9 [diff] |
selinux: remove unneeded ipv6 hook wrappers
Netfilter places the protocol number the hook function is getting called
from in state->pf, so we can use that instead of an extra wrapper.
While at it, remove one-line wrappers too and make
selinux_ip_{out,forward,postroute} useable as hook function.
Signed-off-by: Florian Westphal <fw@strlen.de>
Message-Id: <20211011202229.28289-1-fw@strlen.de>
Signed-off-by: Paul Moore <paul@paul-moore.com>