| /openbmc/linux/security/selinux/include/ |
| H A D | netlabel.h | diff 014ab19a69c325f52d7bae54ceeda73d6307ae0c Fri Oct 10 09:16:33 CDT 2008 Paul Moore <paul.moore@hp.com> selinux: Set socket NetLabel based on connection endpoint
Previous work enabled the use of address based NetLabel selectors, which while
highly useful, brought the potential for additional per-packet overhead when
used. This patch attempts to solve that by applying NetLabel socket labels
when sockets are connect()'d. This should alleviate the per-packet NetLabel
labeling for all connected sockets (yes, it even works for connected DGRAM
sockets).
Signed-off-by: Paul Moore <paul.moore@hp.com>
Reviewed-by: James Morris <jmorris@namei.org>
|
| H A D | objsec.h | diff 014ab19a69c325f52d7bae54ceeda73d6307ae0c Fri Oct 10 09:16:33 CDT 2008 Paul Moore <paul.moore@hp.com> selinux: Set socket NetLabel based on connection endpoint
Previous work enabled the use of address based NetLabel selectors, which while
highly useful, brought the potential for additional per-packet overhead when
used. This patch attempts to solve that by applying NetLabel socket labels
when sockets are connect()'d. This should alleviate the per-packet NetLabel
labeling for all connected sockets (yes, it even works for connected DGRAM
sockets).
Signed-off-by: Paul Moore <paul.moore@hp.com>
Reviewed-by: James Morris <jmorris@namei.org>
|
| /openbmc/linux/include/net/ |
| H A D | cipso_ipv4.h | diff 014ab19a69c325f52d7bae54ceeda73d6307ae0c Fri Oct 10 09:16:33 CDT 2008 Paul Moore <paul.moore@hp.com> selinux: Set socket NetLabel based on connection endpoint
Previous work enabled the use of address based NetLabel selectors, which while
highly useful, brought the potential for additional per-packet overhead when
used. This patch attempts to solve that by applying NetLabel socket labels
when sockets are connect()'d. This should alleviate the per-packet NetLabel
labeling for all connected sockets (yes, it even works for connected DGRAM
sockets).
Signed-off-by: Paul Moore <paul.moore@hp.com>
Reviewed-by: James Morris <jmorris@namei.org>
|
| H A D | netlabel.h | diff 014ab19a69c325f52d7bae54ceeda73d6307ae0c Fri Oct 10 09:16:33 CDT 2008 Paul Moore <paul.moore@hp.com> selinux: Set socket NetLabel based on connection endpoint
Previous work enabled the use of address based NetLabel selectors, which while
highly useful, brought the potential for additional per-packet overhead when
used. This patch attempts to solve that by applying NetLabel socket labels
when sockets are connect()'d. This should alleviate the per-packet NetLabel
labeling for all connected sockets (yes, it even works for connected DGRAM
sockets).
Signed-off-by: Paul Moore <paul.moore@hp.com>
Reviewed-by: James Morris <jmorris@namei.org>
|
| /openbmc/linux/security/selinux/ |
| H A D | netlabel.c | diff 014ab19a69c325f52d7bae54ceeda73d6307ae0c Fri Oct 10 09:16:33 CDT 2008 Paul Moore <paul.moore@hp.com> selinux: Set socket NetLabel based on connection endpoint
Previous work enabled the use of address based NetLabel selectors, which while
highly useful, brought the potential for additional per-packet overhead when
used. This patch attempts to solve that by applying NetLabel socket labels
when sockets are connect()'d. This should alleviate the per-packet NetLabel
labeling for all connected sockets (yes, it even works for connected DGRAM
sockets).
Signed-off-by: Paul Moore <paul.moore@hp.com>
Reviewed-by: James Morris <jmorris@namei.org>
|
| H A D | hooks.c | diff 014ab19a69c325f52d7bae54ceeda73d6307ae0c Fri Oct 10 09:16:33 CDT 2008 Paul Moore <paul.moore@hp.com> selinux: Set socket NetLabel based on connection endpoint
Previous work enabled the use of address based NetLabel selectors, which while
highly useful, brought the potential for additional per-packet overhead when
used. This patch attempts to solve that by applying NetLabel socket labels
when sockets are connect()'d. This should alleviate the per-packet NetLabel
labeling for all connected sockets (yes, it even works for connected DGRAM
sockets).
Signed-off-by: Paul Moore <paul.moore@hp.com>
Reviewed-by: James Morris <jmorris@namei.org>
|
| /openbmc/linux/net/netlabel/ |
| H A D | netlabel_kapi.c | diff 014ab19a69c325f52d7bae54ceeda73d6307ae0c Fri Oct 10 09:16:33 CDT 2008 Paul Moore <paul.moore@hp.com> selinux: Set socket NetLabel based on connection endpoint
Previous work enabled the use of address based NetLabel selectors, which while
highly useful, brought the potential for additional per-packet overhead when
used. This patch attempts to solve that by applying NetLabel socket labels
when sockets are connect()'d. This should alleviate the per-packet NetLabel
labeling for all connected sockets (yes, it even works for connected DGRAM
sockets).
Signed-off-by: Paul Moore <paul.moore@hp.com>
Reviewed-by: James Morris <jmorris@namei.org>
|
| /openbmc/linux/net/ipv4/ |
| H A D | cipso_ipv4.c | diff 014ab19a69c325f52d7bae54ceeda73d6307ae0c Fri Oct 10 09:16:33 CDT 2008 Paul Moore <paul.moore@hp.com> selinux: Set socket NetLabel based on connection endpoint
Previous work enabled the use of address based NetLabel selectors, which while
highly useful, brought the potential for additional per-packet overhead when
used. This patch attempts to solve that by applying NetLabel socket labels
when sockets are connect()'d. This should alleviate the per-packet NetLabel
labeling for all connected sockets (yes, it even works for connected DGRAM
sockets).
Signed-off-by: Paul Moore <paul.moore@hp.com>
Reviewed-by: James Morris <jmorris@namei.org>
|