New commits:
commit 321fa52b5e0b868c552b770d1396d1b0a27f411e
Author: Kavinda Wewegama <kavinda.weweg...@forcepointgov.com>
Date:   Thu Mar 4 13:01:22 2021 -0500

    pluto: remove equality check involving SELinux labels
    
    * Any decision involving SELinux labels should always be SELinux policy 
driven.
      ** Therefore, `pluto` should never do equality checks on labels.
    * In the case of `within_range()`, there is no guarantee that a label is
      allowed to `polmatch` against itself.
      ** Hence, there should not be a `hunk_eq()` call.
    
    Signed-off-by: Paul Wouters <pwout...@redhat.com>

_______________________________________________
Swan-commit mailing list
Swan-commit@lists.libreswan.org
https://lists.libreswan.org/mailman/listinfo/swan-commit

Reply via email to