diff options
| author | Stephen Hemminger | 2005-05-29 23:15:55 +0200 |
|---|---|---|
| committer | David S. Miller | 2005-05-29 23:15:55 +0200 |
| commit | 85967bb46dd1f8f2c49b85a313866c00ac0c9b59 (patch) | |
| tree | 3de44cb857e648d57e74baa047a0c89a96a00893 /security/selinux | |
| parent | [BRIDGE]: set features based on enslaved devices (diff) | |
| download | kernel-qcow2-linux-85967bb46dd1f8f2c49b85a313866c00ac0c9b59.tar.gz kernel-qcow2-linux-85967bb46dd1f8f2c49b85a313866c00ac0c9b59.tar.xz kernel-qcow2-linux-85967bb46dd1f8f2c49b85a313866c00ac0c9b59.zip | |
[BRIDGE]: prevent bad forwarding table updates
Avoid poisoning of the bridge forwarding table by frames that have been
dropped by filtering. This prevents spoofed source addresses on hostile
side of bridge from causing packet leakage, a small but possible security
risk.
Signed-off-by: Stephen Hemminger <shemminger@osdl.org>
Signed-off-by: David S. Miller <davem@davemloft.net>
Diffstat (limited to 'security/selinux')
0 files changed, 0 insertions, 0 deletions