You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.

Paul Moore 23bcdc1ade SELinux: enable dynamic activation/deactivation of NetLabel/SELinux enforcement ... Create a new NetLabel KAPI interface, netlbl_enabled(), which reports on the current runtime status of NetLabel based on the existing configuration. LSMs that make use of NetLabel, i.e. SELinux, can use this new function to determine if they should perform NetLabel access checks. This patch changes the NetLabel/SELinux glue code such that SELinux only enforces NetLabel related access checks when netlbl_enabled() returns true. At present NetLabel is considered to be enabled when there is at least one labeled protocol configuration present. The result is that by default NetLabel is considered to be disabled, however, as soon as an administrator configured a CIPSO DOI definition NetLabel is enabled and SELinux starts enforcing NetLabel related access controls - including unlabeled packet controls. This patch also tries to consolidate the multiple "#ifdef CONFIG_NETLABEL" blocks into a single block to ease future review as recommended by Linus. Signed-off-by: Paul Moore <paul.moore@hp.com> Signed-off-by: James Morris <jmorris@namei.org>		18 years ago
..
Kconfig	[NETLABEL]: Fix build failure.	19 years ago
Makefile	[NetLabel]: core NetLabel subsystem	19 years ago
netlabel_cipso_v4.c	SELinux: enable dynamic activation/deactivation of NetLabel/SELinux enforcement	18 years ago
netlabel_cipso_v4.h	[NetLabel]: rework the Netlink attribute handling (part 2)	19 years ago
netlabel_domainhash.c	NetLabel: honor the audit_enabled flag	18 years ago
netlabel_domainhash.h	[NetLabel]: audit fixups due to delayed feedback	19 years ago
netlabel_kapi.c	SELinux: enable dynamic activation/deactivation of NetLabel/SELinux enforcement	18 years ago
netlabel_mgmt.c	SELinux: enable dynamic activation/deactivation of NetLabel/SELinux enforcement	18 years ago
netlabel_mgmt.h	SELinux: enable dynamic activation/deactivation of NetLabel/SELinux enforcement	18 years ago
netlabel_unlabeled.c	[NETLINK]: Mark netlink policies const	18 years ago
netlabel_unlabeled.h	[NetLabel]: rework the Netlink attribute handling (part 2)	19 years ago
netlabel_user.c	Audit: add TTY input auditing	18 years ago
netlabel_user.h	[GENL]: Add genlmsg_put_reply() to simplify building reply headers	18 years ago