q3k/linux
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity
linux/net/ipv4/netfilter
History
Darrel Goeddel c7bdb545d2 [NETLINK]: Encapsulate eff_cap usage within security framework. 
This patch encapsulates the usage of eff_cap (in netlink_skb_params) within
the security framework by extending security_netlink_recv to include a required
capability parameter and converting all direct usage of eff_caps outside
of the lsm modules to use the interface.  It also updates the SELinux
implementation of the security_netlink_send and security_netlink_recv
hooks to take advantage of the sid in the netlink_skb_params struct.
This also enables SELinux to perform auditing of netlink capability checks.
Please apply, for 2.6.18 if possible.

Signed-off-by: Darrel Goeddel <dgoeddel@trustedcs.com>
Signed-off-by: Stephen Smalley <sds@tycho.nsa.gov>
Acked-by:  James Morris <jmorris@namei.org>
Signed-off-by: David S. Miller <davem@davemloft.net>
2006-06-29 16:57:55 -07:00
..
arp_tables.c [NETFILTER]: x_tables: fix xt_register_table error propagation 2006-06-29 16:57:40 -07:00
arpt_mangle.c
arptable_filter.c
ip_conntrack_amanda.c [NETFILTER]: amanda helper: convert to textsearch infrastructure 2006-06-17 21:29:09 -07:00
ip_conntrack_core.c [SECMARK]: Add secmark support to conntrack 2006-06-17 21:30:01 -07:00
ip_conntrack_ftp.c [NETFILTER]: FTP helper: search optimization 2006-06-17 21:29:07 -07:00
ip_conntrack_helper_h323.c [NETFILTER]: H.323 helper: replace internal_net_addr parameter by routing-based heuristic 2006-06-17 21:29:13 -07:00
ip_conntrack_helper_h323_asn1.c [NETFILTER]: H.323 helper: fix sequence extension parsing 2006-05-23 15:15:10 -07:00
ip_conntrack_helper_h323_types.c [NETFILTER]: H.323 helper: Add support for Call Forwarding 2006-06-17 21:29:11 -07:00
ip_conntrack_helper_pptp.c [NETFILTER]: PPTP helper: fix sstate/cstate typo 2006-05-28 22:51:05 -07:00
ip_conntrack_irc.c
ip_conntrack_netbios_ns.c
ip_conntrack_netlink.c [NETFILTER]: ctnetlink: change table dumping not to require an unique ID 2006-06-17 21:29:03 -07:00
ip_conntrack_proto_generic.c
ip_conntrack_proto_gre.c [NETFILTER]: PPTP helper: fixup gre_keymap_lookup() return type 2006-06-17 21:29:17 -07:00
ip_conntrack_proto_icmp.c [NETFILTER]: conntrack: add sysctl to disable checksumming 2006-06-17 21:28:57 -07:00
ip_conntrack_proto_sctp.c [NETFILTER] SCTP conntrack: fix infinite loop 2006-05-02 17:26:39 -07:00
ip_conntrack_proto_tcp.c [NETFILTER]: conntrack: add sysctl to disable checksumming 2006-06-17 21:28:57 -07:00
ip_conntrack_proto_udp.c [NETFILTER]: conntrack: add sysctl to disable checksumming 2006-06-17 21:28:57 -07:00
ip_conntrack_sip.c [NETFILTER]: Add SIP connection tracking helper 2006-06-17 21:29:15 -07:00
ip_conntrack_standalone.c [SECMARK]: Add secmark support to conntrack 2006-06-17 21:30:01 -07:00
ip_conntrack_tftp.c
ip_nat_amanda.c
ip_nat_core.c
ip_nat_ftp.c
ip_nat_helper.c
ip_nat_helper_h323.c [NETFILTER]: H.323 helper: Add support for Call Forwarding 2006-06-17 21:29:11 -07:00
ip_nat_helper_pptp.c
ip_nat_irc.c
ip_nat_proto_gre.c [NETFILTER]: GRE conntrack: fix htons/htonl confusion 2006-05-19 02:16:29 -07:00
ip_nat_proto_icmp.c
ip_nat_proto_tcp.c
ip_nat_proto_udp.c
ip_nat_proto_unknown.c
ip_nat_rule.c
ip_nat_sip.c [NETFILTER]: Add SIP connection tracking helper 2006-06-17 21:29:15 -07:00
ip_nat_snmp_basic.c [NETFILTER]: SNMP helper: fix debug module param type 2006-06-17 21:29:05 -07:00
ip_nat_standalone.c [NETFILTER]: NAT: silence unused variable warnings with CONFIG_XFRM=n 2006-05-03 23:19:26 -07:00
ip_nat_tftp.c
ip_queue.c [NETLINK]: Encapsulate eff_cap usage within security framework. 2006-06-29 16:57:55 -07:00
ip_tables.c [NETFILTER]: x_tables: fix xt_register_table error propagation 2006-06-29 16:57:40 -07:00
ipt_addrtype.c
ipt_ah.c
ipt_CLUSTERIP.c [NETFILTER]: x_tables: add SCTP/DCCP support where missing 2006-06-17 21:28:47 -07:00
ipt_dscp.c
ipt_DSCP.c
ipt_ECN.c
ipt_ecn.c
ipt_hashlimit.c [NETFILTER]: hashlimit match: fix random initialization 2006-06-17 21:30:11 -07:00
ipt_iprange.c
ipt_LOG.c [NETFILTER]: fix format specifier for netfilter log targets 2006-05-19 02:15:47 -07:00
ipt_MASQUERADE.c
ipt_NETMAP.c
ipt_owner.c
ipt_recent.c [NETFILTER]: recent match: missing refcnt initialization 2006-06-17 21:30:09 -07:00
ipt_REDIRECT.c
ipt_REJECT.c [SECMARK]: Add secmark support to core networking. 2006-06-17 21:29:57 -07:00
ipt_SAME.c
ipt_TCPMSS.c
ipt_TOS.c
ipt_tos.c
ipt_TTL.c
ipt_ttl.c
ipt_ULOG.c
iptable_filter.c
iptable_mangle.c
iptable_raw.c
Kconfig [SECMARK]: Add secmark support to conntrack 2006-06-17 21:30:01 -07:00
Makefile [NETFILTER]: Add SIP connection tracking helper 2006-06-17 21:29:15 -07:00
nf_conntrack_l3proto_ipv4.c [NETFILTER]: conntrack: don't call helpers for related ICMP messages 2006-06-17 21:28:55 -07:00
nf_conntrack_proto_icmp.c [NETFILTER]: conntrack: add sysctl to disable checksumming 2006-06-17 21:28:57 -07:00