]> git.baikalelectronics.ru Git - kernel.git/commit
[MLSXFRM]: Add security sid to sock
authorVenkat Yekkirala <vyekkirala@TrustedCS.com>
Sat, 5 Aug 2006 06:08:56 +0000 (23:08 -0700)
committerDavid S. Miller <davem@sunset.davemloft.net>
Fri, 22 Sep 2006 21:53:22 +0000 (14:53 -0700)
commit78d7a5b16806aca7bf7b785de03dd77d38429791
treec8e0c9b3e55106d2cb085a5047b9d02dbbb28653
parent123c5fd117b51db90e14f29df9aa9b719cdaf6d1
[MLSXFRM]: Add security sid to sock

This adds security for IP sockets at the sock level. Security at the
sock level is needed to enforce the SELinux security policy for
security associations even when a sock is orphaned (such as in the TCP
LAST_ACK state).

This will also be used to enforce SELinux controls over data arriving
at or leaving a child socket while it's still waiting to be accepted.

Signed-off-by: Venkat Yekkirala <vyekkirala@TrustedCS.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
include/linux/security.h
include/net/sock.h
net/core/sock.c
security/dummy.c
security/selinux/hooks.c
security/selinux/include/objsec.h