linux/net/xfrm
Paul Moore 03e1ad7b5d LSM: Make the Labeled IPsec hooks more stack friendly
The xfrm_get_policy() and xfrm_add_pol_expire() put some rather large structs
on the stack to work around the LSM API.  This patch attempts to fix that
problem by changing the LSM API to require only the relevant "security"
pointers instead of the entire SPD entry; we do this for all of the
security_xfrm_policy*() functions to keep things consistent.

Signed-off-by: Paul Moore <paul.moore@hp.com>
Acked-by: James Morris <jmorris@namei.org>
Signed-off-by: David S. Miller <davem@davemloft.net>
2008-04-12 19:07:52 -07:00
..
Kconfig net: xfrm statistics depend on INET 2008-02-14 14:48:45 -08:00
Makefile [XFRM]: Define packet dropping statistics. 2008-01-28 14:59:38 -08:00
xfrm_algo.c [IPSEC]: Add support for aes-ctr. 2008-02-07 23:11:56 -08:00
xfrm_hash.c [IPSEC]: kmalloc + memset conversion to kzalloc 2008-01-28 14:55:05 -08:00
xfrm_hash.h
xfrm_input.c [IPSEC]: Fix inter address family IPsec tunnel handling. 2008-03-24 14:51:51 -07:00
xfrm_output.c [IPSEC]: Fix inter address family IPsec tunnel handling. 2008-03-24 14:51:51 -07:00
xfrm_policy.c LSM: Make the Labeled IPsec hooks more stack friendly 2008-04-12 19:07:52 -07:00
xfrm_proc.c [XFRM]: Fix statistics. 2008-01-31 19:28:30 -08:00
xfrm_state.c Merge branch 'master' of git://git.kernel.org/pub/scm/linux/kernel/git/davem/net-2.6 2008-03-27 18:48:56 -07:00
xfrm_user.c LSM: Make the Labeled IPsec hooks more stack friendly 2008-04-12 19:07:52 -07:00