You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.

Paul Moore 948bf85c1b netlabel: Add functionality to set the security attributes of a packet ... This patch builds upon the new NetLabel address selector functionality by providing the NetLabel KAPI and CIPSO engine support needed to enable the new packet-based labeling. The only new addition to the NetLabel KAPI at this point is shown below: * int netlbl_skbuff_setattr(skb, family, secattr) ... and is designed to be called from a Netfilter hook after the packet's IP header has been populated such as in the FORWARD or LOCAL_OUT hooks. This patch also provides the necessary SELinux hooks to support this new functionality. Smack support is not currently included due to uncertainty regarding the permissions needed to expand the Smack network access controls. Signed-off-by: Paul Moore <paul.moore@hp.com> Reviewed-by: James Morris <jmorris@namei.org>		17 years ago
..
keys	keys: remove unused key_alloc_sem	17 years ago
selinux	netlabel: Add functionality to set the security attributes of a packet	17 years ago
smack	netlabel: Replace protocol/NetLabel linking with refrerence counts	17 years ago
Kconfig	security: filesystem capabilities no longer experimental	17 years ago
Makefile	security: remove dummy module	17 years ago
capability.c	security: Fix setting of PF_SUPERPRIV by __capable()	17 years ago
commoncap.c	security: Fix setting of PF_SUPERPRIV by __capable()	17 years ago
device_cgroup.c	devcgroup: fix race against rmdir()	17 years ago
inode.c	Kobject: convert remaining kobject_unregister() to kobject_put()	17 years ago
root_plug.c	security: Fix setting of PF_SUPERPRIV by __capable()	17 years ago
security.c	security: Fix setting of PF_SUPERPRIV by __capable()	17 years ago