Venkat Yekkirala
67f83cbf08
SELinux: Fix SA selection semantics
...
Fix the selection of an SA for an outgoing packet to be at the same
context as the originating socket/flow. This eliminates the SELinux
policy's ability to use/sendto SAs with contexts other than the socket's.
With this patch applied, the SELinux policy will require one or more of the
following for a socket to be able to communicate with/without SAs:
1. To enable a socket to communicate without using labeled-IPSec SAs:
allow socket_t unlabeled_t:association { sendto recvfrom }
2. To enable a socket to communicate with labeled-IPSec SAs:
allow socket_t self:association { sendto };
allow socket_t peer_sa_t:association { recvfrom };
Signed-off-by: Venkat Yekkirala <vyekkirala@TrustedCS.com>
Signed-off-by: James Morris <jmorris@namei.org>
2006-12-02 21:21:34 -08:00
..
acpi
ACPI: Change ACPI to use dev_archdata instead of firmware_data
2006-12-01 14:52:01 -08:00
asm-alpha
Driver core: add dev_archdata to struct device
2006-12-01 14:52:01 -08:00
asm-arm
Driver core: add dev_archdata to struct device
2006-12-01 14:52:01 -08:00
asm-arm26
Driver core: add dev_archdata to struct device
2006-12-01 14:52:01 -08:00
asm-avr32
Driver core: add dev_archdata to struct device
2006-12-01 14:52:01 -08:00
asm-cris
Driver core: add dev_archdata to struct device
2006-12-01 14:52:01 -08:00
asm-frv
Driver core: add dev_archdata to struct device
2006-12-01 14:52:01 -08:00
asm-generic
Driver core: add dev_archdata to struct device
2006-12-01 14:52:01 -08:00
asm-h8300
Driver core: add dev_archdata to struct device
2006-12-01 14:52:01 -08:00
asm-i386
ACPI: Change ACPI to use dev_archdata instead of firmware_data
2006-12-01 14:52:01 -08:00
asm-ia64
Merge master.kernel.org:/pub/scm/linux/kernel/git/gregkh/pci-2.6
2006-12-01 16:41:27 -08:00
asm-m32r
Driver core: add dev_archdata to struct device
2006-12-01 14:52:01 -08:00
asm-m68k
Driver core: add dev_archdata to struct device
2006-12-01 14:52:01 -08:00
asm-m68knommu
Merge master.kernel.org:/pub/scm/linux/kernel/git/gregkh/driver-2.6
2006-12-01 16:41:07 -08:00
asm-mips
Merge branch 'upstream' of git://ftp.linux-mips.org/pub/scm/upstream-linus
2006-12-01 16:44:02 -08:00
asm-parisc
Merge master.kernel.org:/pub/scm/linux/kernel/git/gregkh/driver-2.6
2006-12-01 16:41:07 -08:00
asm-powerpc
Merge master.kernel.org:/pub/scm/linux/kernel/git/gregkh/pci-2.6
2006-12-01 16:41:27 -08:00
asm-ppc
Driver core: add dev_archdata to struct device
2006-12-01 14:52:01 -08:00
asm-s390
Driver core: add dev_archdata to struct device
2006-12-01 14:52:01 -08:00
asm-sh
Driver core: add dev_archdata to struct device
2006-12-01 14:52:01 -08:00
asm-sh64
Driver core: add dev_archdata to struct device
2006-12-01 14:52:01 -08:00
asm-sparc
Driver core: add dev_archdata to struct device
2006-12-01 14:52:01 -08:00
asm-sparc64
Merge master.kernel.org:/pub/scm/linux/kernel/git/gregkh/pci-2.6
2006-12-01 16:41:27 -08:00
asm-um
Driver core: add dev_archdata to struct device
2006-12-01 14:52:01 -08:00
asm-v850
Driver core: add dev_archdata to struct device
2006-12-01 14:52:01 -08:00
asm-x86_64
ACPI: Change ACPI to use dev_archdata instead of firmware_data
2006-12-01 14:52:01 -08:00
asm-xtensa
Driver core: add dev_archdata to struct device
2006-12-01 14:52:01 -08:00
crypto
keys
linux
SELinux: Fix SA selection semantics
2006-12-02 21:21:34 -08:00
math-emu
media
mtd
net
SELinux: Return correct context for SO_PEERSEC
2006-12-02 21:21:33 -08:00
pcmcia
rdma
IB/cm: Fix automatic path migration support
2006-11-29 15:33:10 -08:00
rxrpc
scsi
[PATCH] add missing libsas include to fix s390 compilation.
2006-11-28 17:26:50 -08:00
sound
Driver core: convert sound core to use struct device
2006-12-01 14:52:01 -08:00
video
Kbuild