linux.git - Linux kernel mainline tree

	Commit message (Collapse)	Author	Age	Files	Lines
*	NetLabel: use the correct CIPSOv4 MLS label limits	Paul Moore	2006-12-02	1	-2/+2
\| \| \| \| \| \| \| \| \|	The CIPSOv4 engine currently has MLS label limits which are slightly larger than what the draft allows. This is not a major problem due to the current implementation but we should fix this so it doesn't bite us later. Signed-off-by: Paul Moore <paul.moore@hp.com> Signed-off-by: James Morris <jmorris@namei.org>
*	[NetLabel]: audit fixups due to delayed feedback	Paul Moore	2006-09-29	1	-2/+2
\| \| \| \| \| \| \| \| \| \|	Fix some issues Steve Grubb had with the way NetLabel was using the audit subsystem. This should make NetLabel more consistent with other kernel generated audit messages specifying configuration changes. Signed-off-by: Paul Moore <paul.moore@hp.com> Acked-by: Steve Grubb <sgrubb@redhat.com> Signed-off-by: David S. Miller <davem@davemloft.net>
*	[NetLabel]: add audit support for configuration changes	Paul Moore	2006-09-28	1	-1/+4
\| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \|	This patch adds audit support to NetLabel, including six new audit message types shown below. #define AUDIT_MAC_UNLBL_ACCEPT 1406 #define AUDIT_MAC_UNLBL_DENY 1407 #define AUDIT_MAC_CIPSOV4_ADD 1408 #define AUDIT_MAC_CIPSOV4_DEL 1409 #define AUDIT_MAC_MAP_ADD 1410 #define AUDIT_MAC_MAP_DEL 1411 Signed-off-by: Paul Moore <paul.moore@hp.com> Acked-by: James Morris <jmorris@namei.org> Signed-off-by: David S. Miller <davem@davemloft.net>
*	[NetLabel]: rework the Netlink attribute handling (part 1)	Paul Moore	2006-09-25	1	-9/+7
\| \| \| \| \| \| \| \|	At the suggestion of Thomas Graf, rewrite NetLabel's use of Netlink attributes to better follow the common Netlink attribute usage. Signed-off-by: Paul Moore <paul.moore@hp.com> Signed-off-by: David S. Miller <davem@davemloft.net>
*	[NetLabel]: correct improper handling of non-NetLabel peer contexts	Paul Moore	2006-09-25	1	-0/+7
\| \| \| \| \| \| \| \| \| \| \| \|	Fix a problem where NetLabel would always set the value of sk_security_struct->peer_sid in selinux_netlbl_sock_graft() to the context of the socket, causing problems when users would query the context of the connection. This patch fixes this so that the value in sk_security_struct->peer_sid is only set when the connection is NetLabel based, otherwise the value is untouched. Signed-off-by: Paul Moore <paul.moore@hp.com> Signed-off-by: David S. Miller <davem@davemloft.net>
*	[NetLabel]: add some missing #includes to various header files	Paul Moore	2006-09-22	1	-0/+2
\| \| \| \| \| \| \|	Add some missing include files to the NetLabel related header files. Signed-off-by: Paul Moore <paul.moore@hp.com> Signed-off-by: David S. Miller <davem@davemloft.net>
*	[NetLabel]: remove unused function prototypes	Paul Moore	2006-09-22	1	-6/+0
\| \| \| \| \| \| \|	Removed some older function prototypes for functions that no longer exist. Signed-off-by: Paul Moore <paul.moore@hp.com> Signed-off-by: David S. Miller <davem@davemloft.net>
*	[NetLabel]: core network changes	Paul Moore	2006-09-22	1	-0/+250
	Changes to the core network stack to support the NetLabel subsystem. This includes changes to the IPv4 option handling to support CIPSO labels. Signed-off-by: Paul Moore <paul.moore@hp.com> Signed-off-by: David S. Miller <davem@davemloft.net>