James Morris
7c9728c393
[SECMARK]: Add secmark support to conntrack ...
Add a secmark field to IP and NF conntracks, so that security markings
on packets can be copied to their associated connections, and also
copied back to packets as required. This is similar to the network
mark field currently used with conntrack, although it is intended for
enforcement of security policy rather than network policy.
Signed-off-by: James Morris <jmorris@namei.org>
Signed-off-by: Andrew Morton <akpm@osdl.org>
Signed-off-by: David S. Miller <davem@davemloft.net>
2006-06-17 21:30:01 -07:00
[Bluetooth] Reduce L2CAP MTU for RFCOMM connections
2006-02-13 11:39:57 +01:00
[IRDA]: fixup type of ->lsap_state
2006-05-22 16:54:30 -07:00
[SECMARK]: Add secmark support to conntrack
2006-06-17 21:30:01 -07:00
[SCTP]: Respect the real chunk length when walking parameters.
2006-05-19 11:52:20 -07:00
[NETFILTER]: futher {ip,ip6,arp}_tables unification
2006-03-22 13:56:56 -08:00
[NET]: sem2mutex part 2
2006-03-20 22:35:41 -08:00
[IPV4]: Possible cleanups.
2006-04-14 15:00:20 -07:00
[AX.25]: Eleminate HZ from AX.25 kernel interfaces
2006-05-03 23:27:16 -07:00
[PATCH] net/compat.h build fix
2006-05-31 16:27:11 -07:00
[DECnet]: Endian annotation and fixes for DECnet.
2006-03-20 22:42:39 -08:00
[DECnet]: Endian annotation and fixes for DECnet.
2006-03-20 22:42:39 -08:00
[DECnet]: Endian annotation and fixes for DECnet.
2006-03-20 22:42:39 -08:00
[DECnet]: Endian annotation and fixes for DECnet.
2006-03-20 22:42:39 -08:00
[DECnet]: Endian annotation and fixes for DECnet.
2006-03-20 22:42:39 -08:00
[DECnet]: Endian annotation and fixes for DECnet.
2006-03-20 22:42:39 -08:00
[DECnet]: Endian annotation and fixes for DECnet.
2006-03-20 22:42:39 -08:00
[PATCH] ieee80211: Fix A band channel count (resent)
2006-05-05 16:55:23 -04:00
[PATCH] ieee80211: Add TKIP crypt->build_iv
2006-01-27 17:08:07 -05:00
[PATCH] softmac: make non-operational after being stopped
2006-05-05 16:55:22 -04:00
[PATCH] softmac: add copyright and license headers
2006-03-22 22:16:56 -05:00
[IPV6]: ADDRCONF: Use our standard algorithm for randomized ifid.
2006-03-20 16:54:09 -08:00
[IPV6]: Deinline few large functions in inet6 code
2006-04-09 22:48:59 -07:00
[ICSK] compat: Introduce inet_csk_compat_[gs]etsockopt
2006-03-20 22:46:16 -08:00
[NET]: use hlist_unhashed()
2006-04-29 18:33:15 -07:00
[NETFILTER]: Fix fragmentation issues with bridge netfilter
2006-04-09 22:25:23 -07:00
[IPV6]: ROUTE: Add experimental support for Route Information Option in RA (RFC4191).
2006-03-20 17:06:24 -08:00
[IPV6]: Clean up hop-by-hop options handler.
2006-04-18 15:57:53 -07:00
[PATCH] WE-20 for kernel 2.6.16
2006-03-23 07:12:57 -05:00
[LLC]: llc_mac_hdr_init const arguments
2006-03-20 22:59:36 -08:00
[LLC]: add multicast support for datagrams
2006-06-17 21:26:08 -07:00
[IPV6]: ROUTE: Add experimental support for Route Information Option in RA (RFC4191).
2006-03-20 17:06:24 -08:00
[NEIGH]: Fix IP-over-ATM and ARP interaction.
2006-05-12 14:56:08 -07:00
[I/OAT]: Utility functions for offloading sk_buff to iovec copies
2006-06-17 21:25:46 -07:00
[NETROM]: Eleminate HZ from NET/ROM kernel interfaces
2006-05-03 23:27:47 -07:00
[IPV4]: Right prototype of __raw_v4_lookup()
2006-06-17 21:29:39 -07:00
[NET]: drop duplicate assignment in request_sock
2006-03-26 17:39:55 -08:00
[ROSE]: Eleminate HZ from ROSE kernel interfaces
2006-05-03 23:28:20 -07:00
[IPV4]: Aggregate route entries with different TOS values
2006-03-25 01:38:55 -08:00
[AF_UNIX]: scm: better initialization
2006-03-20 21:31:51 -08:00
[I/OAT]: Make sk_eat_skb I/OAT aware.
2006-06-17 21:25:52 -07:00
[TCP]: Minimum congestion window consolidation.
2006-06-17 21:29:29 -07:00
[X25]: allow ITU-T DTE facilities for x25
2006-03-22 00:01:31 -08:00
[X25]: Restore skb->dev setting in x25_type_trans().
2006-04-09 22:37:18 -07:00
[IPSEC] xfrm: Use IPPROTO_MAX instead of 256
2006-06-17 21:28:43 -07:00
7c9728c393