Home
last modified time | relevance | path

Searched hist:"3 de4bab5b9f8848a0c16a4b1ffe0452f0d670237" (Results 1 – 5 of 5) sorted by relevance

/openbmc/linux/security/selinux/include/
H A Dxfrm.hdiff 3de4bab5b9f8848a0c16a4b1ffe0452f0d670237 Fri Nov 17 16:38:54 CST 2006 Paul Moore <paul.moore@hp.com> SELinux: peer secid consolidation for external network labeling

Now that labeled IPsec makes use of the peer_sid field in the
sk_security_struct we can remove a lot of the special cases between labeled
IPsec and NetLabel. In addition, create a new function,
security_skb_extlbl_sid(), which we can use in several places to get the
security context of the packet's external label which allows us to further
simplify the code in a few places.

Signed-off-by: Paul Moore <paul.moore@hp.com>
Signed-off-by: James Morris <jmorris@namei.org>
H A Dsecurity.hdiff 3de4bab5b9f8848a0c16a4b1ffe0452f0d670237 Fri Nov 17 16:38:54 CST 2006 Paul Moore <paul.moore@hp.com> SELinux: peer secid consolidation for external network labeling

Now that labeled IPsec makes use of the peer_sid field in the
sk_security_struct we can remove a lot of the special cases between labeled
IPsec and NetLabel. In addition, create a new function,
security_skb_extlbl_sid(), which we can use in several places to get the
security context of the packet's external label which allows us to further
simplify the code in a few places.

Signed-off-by: Paul Moore <paul.moore@hp.com>
Signed-off-by: James Morris <jmorris@namei.org>
/openbmc/linux/security/selinux/
H A Dxfrm.cdiff 3de4bab5b9f8848a0c16a4b1ffe0452f0d670237 Fri Nov 17 16:38:54 CST 2006 Paul Moore <paul.moore@hp.com> SELinux: peer secid consolidation for external network labeling

Now that labeled IPsec makes use of the peer_sid field in the
sk_security_struct we can remove a lot of the special cases between labeled
IPsec and NetLabel. In addition, create a new function,
security_skb_extlbl_sid(), which we can use in several places to get the
security context of the packet's external label which allows us to further
simplify the code in a few places.

Signed-off-by: Paul Moore <paul.moore@hp.com>
Signed-off-by: James Morris <jmorris@namei.org>
H A Dhooks.cdiff 3de4bab5b9f8848a0c16a4b1ffe0452f0d670237 Fri Nov 17 16:38:54 CST 2006 Paul Moore <paul.moore@hp.com> SELinux: peer secid consolidation for external network labeling

Now that labeled IPsec makes use of the peer_sid field in the
sk_security_struct we can remove a lot of the special cases between labeled
IPsec and NetLabel. In addition, create a new function,
security_skb_extlbl_sid(), which we can use in several places to get the
security context of the packet's external label which allows us to further
simplify the code in a few places.

Signed-off-by: Paul Moore <paul.moore@hp.com>
Signed-off-by: James Morris <jmorris@namei.org>
/openbmc/linux/security/selinux/ss/
H A Dservices.cdiff 3de4bab5b9f8848a0c16a4b1ffe0452f0d670237 Fri Nov 17 16:38:54 CST 2006 Paul Moore <paul.moore@hp.com> SELinux: peer secid consolidation for external network labeling

Now that labeled IPsec makes use of the peer_sid field in the
sk_security_struct we can remove a lot of the special cases between labeled
IPsec and NetLabel. In addition, create a new function,
security_skb_extlbl_sid(), which we can use in several places to get the
security context of the packet's external label which allows us to further
simplify the code in a few places.

Signed-off-by: Paul Moore <paul.moore@hp.com>
Signed-off-by: James Morris <jmorris@namei.org>