- leave rsbac check

Changed files:
    kernel-grsec_fixes.patch -> 1.10

diff --git a/kernel-grsec_fixes.patch b/kernel-grsec_fixes.patch
index cd07fe94168ee73cc1df0cbfdb6c92d4f3913f3f..04770b697d2dec4dff95526f054ab1e4e088b26c 100644 (file)
--- a/kernel-grsec_fixes.patch
+++ b/kernel-grsec_fixes.patch
@@ -3,7 +3,7 @@ cap_dac*
 diff -upr a/grsecurity/gracl_cap.c c/grsecurity/gracl_cap.c
 --- a/grsecurity/gracl_cap.c   2007-12-01 00:54:57.312774500 +0000
 +++ c/grsecurity/gracl_cap.c   2007-12-01 01:09:34.923621750 +0000
-@@ -110,3 +110,19 @@ gr_is_capable_nolog(const int cap)
+@@ -110,2 +110,2 @@ gr_is_capable_nolog(const int cap)
        return 0;
  }
 
@@ -174,7 +174,7 @@ diff -upr a/security/commoncap.c c/security/commoncap.c
  }
 --- linux-2.6.34/net/socket.c~ 2010-07-06 13:40:05.892545375 +0200
 +++ linux-2.6.34/net/socket.c  2010-07-06 14:53:01.074608654 +0200
-@@ -1573,18 +1573,6 @@
+@@ -1573,12 +1573,6 @@
        newsock->type = sock->type;
        newsock->ops = sock->ops;
  
@@ -183,12 +183,6 @@ diff -upr a/security/commoncap.c c/security/commoncap.c
 -              sock_release(newsock);
 -              goto out_put;
 -      }
--
--      err = gr_search_accept(sock);
--      if (err) {
--              sock_release(newsock);
--              goto out_put;
--      }
 -
        /*
         * We don't need try_module_get here, as the listening socket (sock)