From: Paul Moore <paul.moore@hp.com>
Date: Fri, 17 Nov 2006 22:38:51 +0000 (-0500)
Subject: NetLabel: use the correct CIPSOv4 MLS label limits
X-Git-Tag: firefly_0821_release~30985^2~47^2~376
X-Git-Url: http://demsky.eecs.uci.edu/git/?a=commitdiff_plain;h=c6b1677a54330b72d961270c9a66bb99c62c4a8e;p=firefly-linux-kernel-4.4.55.git

NetLabel: use the correct CIPSOv4 MLS label limits

The CIPSOv4 engine currently has MLS label limits which are slightly larger
than what the draft allows.  This is not a major problem due to the current
implementation but we should fix this so it doesn't bite us later.

Signed-off-by: Paul Moore <paul.moore@hp.com>
Signed-off-by: James Morris <jmorris@namei.org>
---

diff --git a/include/net/cipso_ipv4.h b/include/net/cipso_ipv4.h
index 718b4d9c891f..4c9522c5178f 100644
--- a/include/net/cipso_ipv4.h
+++ b/include/net/cipso_ipv4.h
@@ -58,10 +58,10 @@
 #define CIPSO_V4_MAP_PASS             2
 
 /* limits */
-#define CIPSO_V4_MAX_REM_LVLS         256
+#define CIPSO_V4_MAX_REM_LVLS         255
 #define CIPSO_V4_INV_LVL              0x80000000
 #define CIPSO_V4_MAX_LOC_LVLS         (CIPSO_V4_INV_LVL - 1)
-#define CIPSO_V4_MAX_REM_CATS         65536
+#define CIPSO_V4_MAX_REM_CATS         65534
 #define CIPSO_V4_INV_CAT              0x80000000
 #define CIPSO_V4_MAX_LOC_CATS         (CIPSO_V4_INV_CAT - 1)