linux/net/netlabel
Paul Moore 948bf85c1b netlabel: Add functionality to set the security attributes of a packet
This patch builds upon the new NetLabel address selector functionality by
providing the NetLabel KAPI and CIPSO engine support needed to enable the
new packet-based labeling.  The only new addition to the NetLabel KAPI at
this point is shown below:

 * int netlbl_skbuff_setattr(skb, family, secattr)

... and is designed to be called from a Netfilter hook after the packet's
IP header has been populated such as in the FORWARD or LOCAL_OUT hooks.

This patch also provides the necessary SELinux hooks to support this new
functionality.  Smack support is not currently included due to uncertainty
regarding the permissions needed to expand the Smack network access controls.

Signed-off-by: Paul Moore <paul.moore@hp.com>
Reviewed-by: James Morris <jmorris@namei.org>
2008-10-10 10:16:32 -04:00
..
Kconfig [NETLABEL]: Fix build failure. 2006-11-05 16:44:06 -08:00
Makefile netlabel: Add a generic way to create ordered linked lists of network addrs 2008-10-10 10:16:32 -04:00
netlabel_addrlist.c netlabel: Add network address selectors to the NetLabel/LSM domain mapping 2008-10-10 10:16:32 -04:00
netlabel_addrlist.h netlabel: Add network address selectors to the NetLabel/LSM domain mapping 2008-10-10 10:16:32 -04:00
netlabel_cipso_v4.c netlabel: Replace protocol/NetLabel linking with refrerence counts 2008-10-10 10:16:31 -04:00
netlabel_cipso_v4.h NetLabel: introduce a new kernel configuration API for NetLabel 2008-02-05 09:44:20 -08:00
netlabel_domainhash.c netlabel: Add network address selectors to the NetLabel/LSM domain mapping 2008-10-10 10:16:32 -04:00
netlabel_domainhash.h netlabel: Add network address selectors to the NetLabel/LSM domain mapping 2008-10-10 10:16:32 -04:00
netlabel_kapi.c netlabel: Add functionality to set the security attributes of a packet 2008-10-10 10:16:32 -04:00
netlabel_mgmt.c netlabel: Add network address selectors to the NetLabel/LSM domain mapping 2008-10-10 10:16:32 -04:00
netlabel_mgmt.h netlabel: Add network address selectors to the NetLabel/LSM domain mapping 2008-10-10 10:16:32 -04:00
netlabel_unlabeled.c netlabel: Add network address selectors to the NetLabel/LSM domain mapping 2008-10-10 10:16:32 -04:00
netlabel_unlabeled.h NetLabel: Introduce static network labels for unlabeled connections 2008-01-30 08:17:28 +11:00
netlabel_user.c Audit: collect sessionid in netlink messages 2008-04-28 06:18:03 -04:00
netlabel_user.h Audit: collect sessionid in netlink messages 2008-04-28 06:18:03 -04:00