summaryrefslogtreecommitdiffstats
path: root/include
diff options
context:
space:
mode:
authorDavid Quigley <dpquigl@davequigley.com>2013-05-22 12:50:37 -0400
committerTrond Myklebust <Trond.Myklebust@netapp.com>2013-06-08 16:20:12 -0400
commiteb9ae686507bc5a5ca78e6b3fbe629cd5cc67864 (patch)
tree9b2c265703bc94af3d99ec5a5a00d626ae906519 /include
parent649f6e7718891fe7691e5084ce3fa623acba3129 (diff)
downloadlinux-stable-eb9ae686507bc5a5ca78e6b3fbe629cd5cc67864.tar.gz
linux-stable-eb9ae686507bc5a5ca78e6b3fbe629cd5cc67864.tar.bz2
linux-stable-eb9ae686507bc5a5ca78e6b3fbe629cd5cc67864.zip
SELinux: Add new labeling type native labels
There currently doesn't exist a labeling type that is adequate for use with labeled NFS. Since NFS doesn't really support xattrs we can't use the use xattr labeling behavior. For this we developed a new labeling type. The native labeling type is used solely by NFS to ensure NFS inodes are labeled at runtime by the NFS code instead of relying on the SELinux security server on the client end. Acked-by: Eric Paris <eparis@redhat.com> Acked-by: James Morris <james.l.morris@oracle.com> Signed-off-by: Matthew N. Dodd <Matthew.Dodd@sparta.com> Signed-off-by: Miguel Rodel Felipe <Rodel_FM@dsi.a-star.edu.sg> Signed-off-by: Phua Eu Gene <PHUA_Eu_Gene@dsi.a-star.edu.sg> Signed-off-by: Khin Mi Mi Aung <Mi_Mi_AUNG@dsi.a-star.edu.sg> Signed-off-by: Trond Myklebust <Trond.Myklebust@netapp.com>
Diffstat (limited to 'include')
-rw-r--r--include/linux/security.h3
1 files changed, 3 insertions, 0 deletions
diff --git a/include/linux/security.h b/include/linux/security.h
index aa656fbc4308..a585a9085e46 100644
--- a/include/linux/security.h
+++ b/include/linux/security.h
@@ -61,6 +61,9 @@ struct mm_struct;
#define SECURITY_CAP_NOAUDIT 0
#define SECURITY_CAP_AUDIT 1
+/* LSM Agnostic defines for sb_set_mnt_opts */
+#define SECURITY_LSM_NATIVE_LABELS 1
+
struct ctl_table;
struct audit_krule;
struct user_namespace;