]> git.baikalelectronics.ru Git - kernel.git/commit
calipso: Allow the lsm to label the skbuff directly.
authorHuw Davies <huw@codeweavers.com>
Mon, 27 Jun 2016 19:06:15 +0000 (15:06 -0400)
committerPaul Moore <paul@paul-moore.com>
Mon, 27 Jun 2016 19:06:15 +0000 (15:06 -0400)
commitc9b7c52710095e0236b07cf49781ef8468aec21b
treecf6e68541ba82eb7c4b11a7ba563f423060d8b46
parent94cec7b4ab7ba386a9344000d0d9c75d245880f6
calipso: Allow the lsm to label the skbuff directly.

In some cases, the lsm needs to add the label to the skbuff directly.
A NF_INET_LOCAL_OUT IPv6 hook is added to selinux to match the IPv4
behaviour.  This allows selinux to label the skbuffs that it requires.

Signed-off-by: Huw Davies <huw@codeweavers.com>
Signed-off-by: Paul Moore <paul@paul-moore.com>
include/net/netlabel.h
net/ipv6/calipso.c
net/netlabel/netlabel_calipso.c
net/netlabel/netlabel_calipso.h
net/netlabel/netlabel_kapi.c
security/selinux/hooks.c