Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
semanage: handle getprotobyname() failure case
At least on Debian, /etc/protocols, which is used by socket.getprotobyname() to resolve protocols to names, does not contain an entry for "ipv4". In that case, set the protocol number used by audit logs for "ipv4" to a fixed value. To ensure audit log compatibility, let's use the same numeric value as Fedora: 4, which is actually understood by kernel as IP over IP. Signed-off-by: Topi Miettinen <[email protected]> Acked-by: Stephen Smalley <[email protected]>
- Loading branch information