linux/security/selinux
Dustin Kirkland 8c8570fb8f [PATCH] Capture selinux subject/object context information.
This patch extends existing audit records with subject/object context
information. Audit records associated with filesystem inodes, ipc, and
tasks now contain SELinux label information in the field "subj" if the
item is performing the action, or in "obj" if the item is the receiver
of an action.

These labels are collected via hooks in SELinux and appended to the
appropriate record in the audit code.

This additional information is required for Common Criteria Labeled
Security Protection Profile (LSPP).

[AV: fixed kmalloc flags use]
[folded leak fixes]
[folded cleanup from akpm (kfree(NULL)]
[folded audit_inode_context() leak fix]
[folded akpm's fix for audit_ipc_perm() definition in case of !CONFIG_AUDIT]

Signed-off-by: Dustin Kirkland <dustin.kirkland@us.ibm.com>
Signed-off-by: David Woodhouse <dwmw2@infradead.org>
Signed-off-by: Andrew Morton <akpm@osdl.org>
Signed-off-by: Al Viro <viro@zeniv.linux.org.uk>
2006-03-20 14:08:54 -05:00
..
include [PATCH] selinux: remove security struct magic number fields and tests 2006-02-01 08:53:19 -08:00
ss [PATCH] selinux: Remove unneeded k[cm]alloc() return value casts 2006-01-10 08:02:02 -08:00
avc.c [PATCH] selinux: require AUDIT 2006-02-07 16:12:33 -08:00
hooks.c [PATCH] Capture selinux subject/object context information. 2006-03-20 14:08:54 -05:00
Kconfig [PATCH] selinux: require AUDIT 2006-02-07 16:12:33 -08:00
Makefile [PATCH] selinux: require SECURITY_NETWORK 2006-02-05 11:06:52 -08:00
netif.c [PATCH] SELinux: convert to kzalloc 2005-10-30 17:37:11 -08:00
netlink.c [NETLINK]: Add "groups" argument to netlink_kernel_create 2005-08-29 16:01:11 -07:00
nlmsgtab.c [PATCH] Define new range of userspace messages. 2006-03-20 14:08:53 -05:00
selinuxfs.c [PATCH] shrink dentry struct 2006-01-08 20:13:58 -08:00
xfrm.c [XFRM]: Fix sparse warning. 2006-01-07 12:57:27 -08:00