[PATCH 3.2 144/185] selinux: handle TCP SYN-ACK packets correctly in selinux_ip_output()

3.2.54-rc1 review patch. If anyone has any objections, please let me know. -- From: Paul Moore commit 47180068276a04ed31d24fe04c673138208b07a9 upstream. In selinux_ip_output() we always label packets based on the parent socket. While this approach works in almost all cases,

[PATCH 3.2 144/185] selinux: handle TCP SYN-ACK packets correctly in selinux_ip_output()

3.2.54-rc1 review patch. If anyone has any objections, please let me know. -- From: Paul Moore pmo...@redhat.com commit 47180068276a04ed31d24fe04c673138208b07a9 upstream. In selinux_ip_output() we always label packets based on the parent socket. While this approach works in