You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.

Paul Moore f8687afefc [NetLabel]: protect the CIPSOv4 socket option from setsockopt() ... This patch makes two changes to protect applications from either removing or tampering with the CIPSOv4 IP option on a socket. The first is the requirement that applications have the CAP_NET_RAW capability to set an IPOPT_CIPSO option on a socket; this prevents untrusted applications from setting their own CIPSOv4 security attributes on the packets they send. The second change is to SELinux and it prevents applications from setting any IPv4 options when there is an IPOPT_CIPSO option already present on the socket; this prevents applications from removing CIPSOv4 security attributes from the packets they send. Signed-off-by: Paul Moore <paul.moore@hp.com> Signed-off-by: James Morris <jmorris@namei.org> Signed-off-by: David S. Miller <davem@davemloft.net>		19 years ago
..
Makefile	Linux-2.6.12-rc2	20 years ago
avtab.c	[PATCH] selinux: more ARRAY_SIZE cleanups	19 years ago
avtab.h	[PATCH] selinux: Reduce memory use by avtab	20 years ago
conditional.c	[PATCH] SELinux: convert to kzalloc	20 years ago
conditional.h	Linux-2.6.12-rc2	20 years ago
constraint.h	Linux-2.6.12-rc2	20 years ago
context.h	Linux-2.6.12-rc2	20 years ago
ebitmap.c	NetLabel: better error handling involving mls_export_cat()	19 years ago
ebitmap.h	[NetLabel]: SELinux support	19 years ago
hashtab.c	[PATCH] SELinux: convert to kzalloc	20 years ago
hashtab.h	Linux-2.6.12-rc2	20 years ago
mls.c	NetLabel: better error handling involving mls_export_cat()	19 years ago
mls.h	[NetLabel]: SELinux support	19 years ago
mls_types.h	Linux-2.6.12-rc2	20 years ago
policydb.c	SELinux: Bug fix in polidydb_destroy	19 years ago
policydb.h	[PATCH] selinux: add support for range transitions on object classes	19 years ago
services.c	[NetLabel]: protect the CIPSOv4 socket option from setsockopt()	19 years ago
services.h	Linux-2.6.12-rc2	20 years ago
sidtab.c	Linux-2.6.12-rc2	20 years ago
sidtab.h	Linux-2.6.12-rc2	20 years ago
symtab.c	Linux-2.6.12-rc2	20 years ago
symtab.h	Linux-2.6.12-rc2	20 years ago