]> git.baikalelectronics.ru Git - kernel.git/commit
SELinux: peer secid consolidation for external network labeling
authorPaul Moore <paul.moore@hp.com>
Fri, 17 Nov 2006 22:38:54 +0000 (17:38 -0500)
committerDavid S. Miller <davem@sunset.davemloft.net>
Sun, 3 Dec 2006 05:24:14 +0000 (21:24 -0800)
commit10ea0ec37e1bb6a1e1b76e33eaaa51d7e50b719c
treef65c12b53bf2ad02645ea31522f67e7318019498
parent2a499eadaad3a2bcb1694665f59c31f148011b77
SELinux: peer secid consolidation for external network labeling

Now that labeled IPsec makes use of the peer_sid field in the
sk_security_struct we can remove a lot of the special cases between labeled
IPsec and NetLabel.  In addition, create a new function,
security_skb_extlbl_sid(), which we can use in several places to get the
security context of the packet's external label which allows us to further
simplify the code in a few places.

Signed-off-by: Paul Moore <paul.moore@hp.com>
Signed-off-by: James Morris <jmorris@namei.org>
security/selinux/hooks.c
security/selinux/include/security.h
security/selinux/include/selinux_netlabel.h
security/selinux/include/xfrm.h
security/selinux/ss/services.c
security/selinux/xfrm.c