You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.

Eric Dumazet ca10b9e9a8 selinux: add a skb_owned_by() hook ... Commit 90ba9b1986 (tcp: tcp_make_synack() can use alloc_skb()) broke certain SELinux/NetLabel configurations by no longer correctly assigning the sock to the outgoing SYNACK packet. Cost of atomic operations on the LISTEN socket is quite big, and we would like it to happen only if really needed. This patch introduces a new security_ops->skb_owned_by() method, that is a void operation unless selinux is active. Reported-by: Miroslav Vadkerti <mvadkert@redhat.com> Diagnosed-by: Paul Moore <pmoore@redhat.com> Signed-off-by: Eric Dumazet <edumazet@google.com> Cc: "David S. Miller" <davem@davemloft.net> Cc: linux-security-module@vger.kernel.org Acked-by: James Morris <james.l.morris@oracle.com> Tested-by: Paul Moore <pmoore@redhat.com> Acked-by: Paul Moore <pmoore@redhat.com> Signed-off-by: David S. Miller <davem@davemloft.net>		12 years ago
..
apparmor	new helper: file_inode(file)	12 years ago
integrity	hlist: drop the node parameter from iterators	12 years ago
keys	Fix: compat_rw_copy_check_uvector() misuse in aio, readv, writev, and security keys	12 years ago
selinux	selinux: add a skb_owned_by() hook	12 years ago
smack	new helper: file_inode(file)	12 years ago
tomoyo	new helper: file_inode(file)	12 years ago
yama	yama: Better permission check for ptraceme	12 years ago
Kconfig	…
Makefile	…
capability.c	selinux: add a skb_owned_by() hook	12 years ago
commoncap.c	kill f_vfsmnt	12 years ago
device_cgroup.c	device_cgroup: don't grab mutex in rcu callback	12 years ago
inode.c	…
lsm_audit.c	…
min_addr.c	…
security.c	selinux: add a skb_owned_by() hook	12 years ago