You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.

Casey Schaufler 4bc87e6277 Smack: unlabeled outgoing ambient packets ... Smack uses CIPSO labeling, but allows for unlabeled packets by specifying an "ambient" label that is applied to incoming unlabeled packets. Because the other end of the connection may dislike IP options, and ssh is one know application that behaves thus, it is prudent to respond in kind. This patch changes the network labeling behavior such that an outgoing packet that would be given a CIPSO label that matches the ambient label is left unlabeled. An "unlbl" domain is added and the netlabel defaulting mechanism invoked rather than assuming that everything is CIPSO. Locking has been added around changes to the ambient label as the mechanisms used to do so are more involved. Signed-off-by: Casey Schaufler <casey@schaufler-ca.com> Acked-by: Paul Moore <paul.moore@hp.com> Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>		17 years ago
..
keys	Convert ERR_PTR(PTR_ERR(p)) instances to ERR_CAST(p)	17 years ago
selinux	d_path: Use struct path in struct avc_audit_data	17 years ago
smack	Smack: unlabeled outgoing ambient packets	17 years ago
Kconfig	security: allow Kconfig to set default mmap_min_addr protection	17 years ago
Makefile	…
capability.c	…
commoncap.c	…
dummy.c	…
inode.c	…
root_plug.c	…
security.c	security: allow Kconfig to set default mmap_min_addr protection	17 years ago