linux/include/net/netlabel.h, branch v2.6.19

[PATCH] gfp_t in netlabel

2006-10-15T18:00:58Z

Signed-off-by: Al Viro Signed-off-by: Linus Torvalds

NetLabel: fix a cache race condition

2006-10-12T06:59:29Z

Testing revealed a problem with the NetLabel cache where a cached entry could be freed while in use by the LSM layer causing an oops and other problems. This patch fixes that problem by introducing a reference counter to the cache entry so that it is only freed when it is no longer in use. Signed-off-by: Paul Moore Signed-off-by: James Morris

[NetLabel]: audit fixups due to delayed feedback

2006-09-30T00:05:05Z

Fix some issues Steve Grubb had with the way NetLabel was using the audit subsystem. This should make NetLabel more consistent with other kernel generated audit messages specifying configuration changes. Signed-off-by: Paul Moore Acked-by: Steve Grubb Signed-off-by: David S. Miller

[NetLabel]: add audit support for configuration changes

2006-09-29T01:03:09Z

This patch adds audit support to NetLabel, including six new audit message types shown below. #define AUDIT_MAC_UNLBL_ACCEPT 1406 #define AUDIT_MAC_UNLBL_DENY 1407 #define AUDIT_MAC_CIPSOV4_ADD 1408 #define AUDIT_MAC_CIPSOV4_DEL 1409 #define AUDIT_MAC_MAP_ADD 1410 #define AUDIT_MAC_MAP_DEL 1411 Signed-off-by: Paul Moore Acked-by: James Morris Signed-off-by: David S. Miller

[NetLabel]: rework the Netlink attribute handling (part 1)

2006-09-25T22:56:09Z

At the suggestion of Thomas Graf, rewrite NetLabel's use of Netlink attributes to better follow the common Netlink attribute usage. Signed-off-by: Paul Moore Signed-off-by: David S. Miller

[NetLabel]: correct improper handling of non-NetLabel peer contexts

2006-09-25T22:52:01Z

Fix a problem where NetLabel would always set the value of sk_security_struct->peer_sid in selinux_netlbl_sock_graft() to the context of the socket, causing problems when users would query the context of the connection. This patch fixes this so that the value in sk_security_struct->peer_sid is only set when the connection is NetLabel based, otherwise the value is untouched. Signed-off-by: Paul Moore Signed-off-by: David S. Miller

[PATCH] netlabel gfp annotations

2006-09-24T22:55:03Z

Signed-off-by: Al Viro Signed-off-by: Linus Torvalds

[NetLabel]: add some missing #includes to various header files

2006-09-22T22:18:39Z

Add some missing include files to the NetLabel related header files. Signed-off-by: Paul Moore Signed-off-by: David S. Miller

[NetLabel]: core network changes

2006-09-22T21:53:32Z

Changes to the core network stack to support the NetLabel subsystem. This includes changes to the IPv4 option handling to support CIPSO labels. Signed-off-by: Paul Moore Signed-off-by: David S. Miller