Paul Moore
8cc44579d1
NetLabel: Introduce static network labels for unlabeled connections ...
Most trusted OSs, with the exception of Linux, have the ability to specify
static security labels for unlabeled networks. This patch adds this ability to
the NetLabel packet labeling framework.
If the NetLabel subsystem is called to determine the security attributes of an
incoming packet it first checks to see if any recognized NetLabel packet
labeling protocols are in-use on the packet. If none can be found then the
unlabled connection table is queried and based on the packets incoming
interface and address it is matched with a security label as configured by the
administrator using the netlabel_tools package. The matching security label is
returned to the caller just as if the packet was explicitly labeled using a
labeling protocol.
Signed-off-by: Paul Moore <paul.moore@hp.com>
Signed-off-by: James Morris <jmorris@namei.org>
2008-01-30 08:17:28 +11:00
kobject: convert /sys/firmware/acpi/ to use kobject_create
2008-01-24 20:40:23 -08:00
alpha: build fixes
2007-12-17 19:28:16 -08:00
ext4: Add ext4_find_next_bit()
2008-01-28 23:58:27 -05:00
remove __attribute_used__
2008-01-28 23:21:18 +01:00
[Blackfin] arch: Add the semtimedop syscall. Upstream uClibc doesn't compile without it.
2008-01-27 19:56:43 +08:00
ide: remove stale ide.h "configuration options"
2008-01-25 22:17:08 +01:00
ide: remove stale ide.h "configuration options"
2008-01-25 22:17:08 +01:00
Merge git://git.kernel.org/pub/scm/linux/kernel/git/sam/kbuild
2008-01-29 22:46:14 +11:00
asm-h8300: parentheses around definition CLOCK_TICK_RATE
2007-12-10 19:43:54 -08:00
remove __attribute_used__
2008-01-28 23:21:18 +01:00
m32r: Update sys_rt_sigsuspend
2007-11-28 01:24:04 +09:00
ext4: Add ext4_find_next_bit()
2008-01-28 23:58:27 -05:00
ext4: Add ext4_find_next_bit()
2008-01-28 23:58:27 -05:00
[MIPS] Malta, Atlas: move an extern function declaration to the header file
2008-01-29 10:15:05 +00:00
[PARISC] print more than one character at a time for pdc console
2007-12-06 09:32:15 -08:00
Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net-2.6.25
2008-01-29 22:54:01 +11:00
ppc: fix AT_VECTOR_SIZE on arch/ppc
2007-10-22 19:18:54 -07:00
ext4: Add ext4_find_next_bit()
2008-01-28 23:58:27 -05:00
remove __attribute_used__
2008-01-28 23:21:18 +01:00
[SPARC32]: Silence sparc32 warnings on missing syscalls.
2007-12-14 10:59:50 -08:00
[SPARC64]: Implement pci_resource_to_user()
2007-12-26 19:33:46 -08:00
uml: update address space affected by pud_clear
2007-11-14 18:45:37 -08:00
Add CONFIG_DEBUG_SG sg validation
2007-10-22 21:20:03 +02:00
remove __attribute_used__
2008-01-28 23:21:18 +01:00
xtensa: dma-mapping.h is using linux/scatterlist.h functions, so include it
2007-10-24 13:28:40 +02:00
[CRYPTO] api: Include sched.h for cond_resched in scatterwalk.h
2008-01-11 08:16:59 +11:00
SELinux: Enable dynamic enable/disable of the network access checks
2008-01-30 08:17:26 +11:00
i2c: Constify client address data
2008-01-27 18:14:46 +01:00
NetLabel: Introduce static network labels for unlabeled connections
2008-01-30 08:17:28 +11:00
[AVR32] pcmcia ioaddr_t should be 32 bits on AVR32
2007-11-15 13:47:19 +01:00
RDMA/cma: add support for rdma_migrate_id()
2008-01-25 14:15:32 -08:00
SG: Convert SCSI to use scatterlist helpers for sg chaining
2008-01-28 10:05:27 +01:00
[ALSA] version 1.0.15
2007-11-20 20:16:43 +01:00
Make asm-x86/bootparam.h includable from userspace.
2007-10-23 15:49:47 +10:00
8cc44579d1