Re: [PATCH] Add xfrm policy change auditing to pfkey_spdget

From: Eric Paris
Date: Thu Mar 08 2007 - 11:20:52 EST


On Wed, 2007-03-07 at 16:07 -0800, David Miller wrote:
> From: David Miller <davem@xxxxxxxxxxxxx>
> Date: Wed, 07 Mar 2007 15:43:16 -0800 (PST)
>
> > From: Eric Paris <eparis@xxxxxxxxxxxxxx>
> > Date: Fri, 02 Mar 2007 13:51:24 -0500
> >
> > > pfkey_spdget neither had an LSM security hook nor auditing for the
> > > removal of xfrm_policy structs. The security hook was added when it was
> > > moved into xfrm_policy_byid instead of the callers to that function by
> > > my earlier patch and this patch adds the auditing hooks as well.
> > >
> > > Signed-off-by: Eric Paris <eparis@xxxxxxxxxx>
> >
> > Applied.
>
> This patch was missing an openning brace on the "if (delete)" line.
> Eric you don't post patches without at least compile testing
> them now do you? :-)
>
> I fixed this up, but I will just kick it back to you next time,
> and I will likely growl very loudly in your general direction
> too. ;)

I lose at using git. Sorry. I'll be more careful to check that all of
my changes on the current branch are committed before I run my git diff.
Or maybe someone will convince me to use git in an all new better way.
I created a branch that has your tree and then created a new branch off
of that for my changes. I checked out my branch made my patch and
commited. I then tried to compile failed and fixed it up. I then
compiled, booted, and tested. When I thought it was working I did a

git diff miller..my-branch-with-pfkey_spdget

which didn't have my fix up because i didn't commit it to my local
branch. Is there a better way to get a diff between my miller tree and
'everything in the branch I have checked out even if it is not
committed'?

Sorry, even if there are no ideas I'll be more careful.

-Eric

-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at http://vger.kernel.org/majordomo-info.html
Please read the FAQ at http://www.tux.org/lkml/