Paul Moore
d621d35e57
SELinux: Enable dynamic enable/disable of the network access checks ...
This patch introduces a mechanism for checking when labeled IPsec or SECMARK
are in use by keeping introducing a configuration reference counter for each
subsystem. In the case of labeled IPsec, whenever a labeled SA or SPD entry
is created the labeled IPsec/XFRM reference count is increased and when the
entry is removed it is decreased. In the case of SECMARK, when a SECMARK
target is created the reference count is increased and later decreased when the
target is removed. These reference counters allow SELinux to quickly determine
if either of these subsystems are enabled.
NetLabel already has a similar mechanism which provides the netlbl_enabled()
function.
This patch also renames the selinux_relabel_packet_permission() function to
selinux_secmark_relabel_packet_permission() as the original name and
description were misleading in that they referenced a single packet label which
is not the case.
Signed-off-by: Paul Moore <paul.moore@hp.com>
Signed-off-by: James Morris <jmorris@namei.org>
2008-01-30 08:17:26 +11:00
[CAN]: Add missing Kbuild entries
2008-01-28 14:54:13 -08:00
i2c/tps65010: move header to <linux/i2c/...>
2008-01-27 18:14:49 +01:00
mmc: remove unused 'mode' from the mmc_host structure
2007-12-12 20:01:01 +01:00
[NETFILTER]: nf_conntrack_sctp: remove unused ttag field from conntrack data
2008-01-28 15:02:38 -08:00
[NETFILTER]: arp_tables: add compat support
2008-01-28 14:58:49 -08:00
[NETFILTER]: Rename ipt_iprange to xt_iprange
2008-01-28 15:02:27 -08:00
[NETFILTER]: ip6_tables: use XT_ALIGN
2008-01-28 14:58:43 -08:00
ssb: Add boardflags_hi field to the sprom data structure
2008-01-28 15:09:52 -08:00
SUNRPC: make sunrpc/xprtsock.c:xs_setup_{udp,tcp}() static
2007-11-26 16:24:50 -05:00
[NET] tc_nat: header install
2007-12-26 19:36:35 -08:00
ACPI: make _OSI(Linux) console messages smarter
2008-01-23 21:26:15 -05:00
apm_event{,info}_t are userspace types
2007-12-17 19:28:16 -08:00
libata annotations and fixes
2008-01-23 05:24:15 -05:00
[ATM]: [br2864] whitespace cleanup
2008-01-28 15:00:14 -08:00
[ATM]: Convert struct class_device to struct device
2008-01-28 15:00:12 -08:00
[SCSI] attribute_container: update to use the group interface
2008-01-23 11:29:17 -06:00
Merge branch 'for-2.6.25' of git://git.kernel.dk/linux-2.6-block
2008-01-29 08:51:56 +11:00
blktrace: Add blktrace ioctls to SCSI generic devices
2008-01-28 10:04:46 +01:00
Revert "x86_64: allocate sparsemem memmap above 4G"
2007-10-29 14:05:37 -07:00
Add buffer head related helper functions
2008-01-28 23:58:26 -05:00
[CAN]: Add PF_CAN core module
2008-01-28 14:54:10 -08:00
cdrom: add more GPCMD_* constants
2008-01-23 05:24:14 -05:00
sched: cpu accounting controller (V2)
2007-12-02 20:04:49 +01:00
remove __attribute_used__
2008-01-28 23:21:18 +01:00
remove __attribute_used__
2008-01-28 23:21:18 +01:00
remove __attribute_used__
2008-01-28 23:21:18 +01:00
sched: fix fastcall mismatch in completion APIs
2007-10-24 18:23:48 +02:00
[CONNECTOR]: Cleanup struct cn_callback_entry
2008-01-28 15:00:40 -08:00
cpu-hotplug: fix build on !CONFIG_SMP
2008-01-25 21:08:02 +01:00
cpuidle: fix HP nx6125 regression
2007-11-19 21:43:22 -05:00
CPU hotplug: fix cpu_is_offline() on !CONFIG_HOTPLUG_CPU
2008-01-06 12:39:42 -08:00
[CRYPTO] api: Set default CRYPTO_MINALIGN to unsigned long long
2008-01-11 08:17:01 +11:00
[DCCP]: Handle timestamps on Request/Response exchange separately
2008-01-28 14:57:51 -08:00
softlockup: automatically detect hung TASK_UNINTERRUPTIBLE tasks
2008-01-25 21:08:02 +01:00
dm: merge max_hw_sector
2007-12-20 17:32:12 +00:00
Driver core: fix coding style issues in device.h
2008-01-24 21:04:46 -08:00
dlm: Split lock mode and flag constants into a sharable header.
2008-01-25 14:46:04 -08:00
dlm: Split lock mode and flag constants into a sharable header.
2008-01-25 14:46:04 -08:00
DMA: Convert from class_device to device for DMA engine
2008-01-24 20:40:05 -08:00
DMI: create dmi_get_slot()
2008-01-23 21:23:13 -05:00
block: let elv_register() return void
2007-12-18 08:29:28 +01:00
remove __attribute_used__
2008-01-28 23:21:18 +01:00
x86 merge fallout: uml
2007-10-29 07:41:32 -07:00
fix up ext2_fs.h for userspace after reservations backport
2007-11-29 09:24:53 -08:00
Fix 64KB blocksize in ext3 directories
2007-11-14 18:45:43 -08:00
ext4: Add multi block allocator for ext4
2008-01-29 00:19:52 -05:00
ext4: Add new functions for searching extent tree
2008-01-28 23:58:27 -05:00
ext4: Add multi block allocator for ext4
2008-01-29 00:19:52 -05:00
ext4: Add multi block allocator for ext4
2008-01-29 00:19:52 -05:00
hwmon: (f75375s) Allow setting up fans with platform_data
2007-11-08 08:42:46 -05:00
ext4: Add inode version support in ext4
2008-01-28 23:58:27 -05:00
fuse: pass open flags to read and write
2007-11-29 09:24:54 -08:00
sched, futex: detach sched.h and futex.h
2008-01-25 21:08:34 +01:00
Driver core: convert block from raw kobjects to core devices
2008-01-24 20:40:36 -08:00
sched: remove the !PREEMPT_BKL code
2008-01-25 21:08:33 +01:00
ide: remove 'command_type' field from ide_task_t
2008-01-25 22:17:14 +01:00
HID: Support Samsung IR remote
2008-01-28 14:51:22 +01:00
hrtimer: fixup the HRTIMER_CB_IRQSAFE_NO_SOFTIRQ fallback
2008-01-25 21:08:31 +01:00
Revert "hugetlb: Add hugetlb_dynamic_pool sysctl"
2007-12-17 19:28:17 -08:00
[HWRNG]: move status polling loop to data_present callbacks
2008-01-11 08:16:16 +11:00
i2c: Discard unused driver IDs
2008-01-27 18:14:50 +01:00
i2c: Add i2c_new_dummy() utility
2008-01-27 18:14:52 +01:00
ide: switch set_xfer_rate() to use REQ_TYPE_ATA_TASKFILE requests
2008-01-26 20:13:12 +01:00
mac80211: fixing ieee80211_bar types
2008-01-28 15:10:45 -08:00
[IPV6]: Add RFC4214 support
2008-01-28 14:55:09 -08:00
[IPV6] ADDRCONF: Support RFC3484 configurable address selection policy table.
2008-01-28 14:53:58 -08:00
[CAN]: Allocate protocol numbers for PF_CAN
2008-01-28 14:54:09 -08:00
bonding: Add new layer2+3 hash for xor/802.3ad modes
2007-12-07 15:00:32 -05:00
[ETHER]: Bring back MAC_FMT
2008-01-28 15:08:27 -08:00
annotate the rest of drivers/net/wan
2008-01-28 15:07:58 -08:00
[TR]: Use ctl paths to register net/token-ring/ table
2008-01-28 14:56:28 -08:00
annotate tun
2008-01-28 15:07:57 -08:00
[IPV6]: Add RFC4214 support
2008-01-28 14:55:09 -08:00
[VLAN]: Turn __constant_htons into htons where possible
2008-01-28 15:08:32 -08:00
[IPV4]: Enable use of 240/4 address space.
2008-01-28 15:08:44 -08:00
[LRO]: fix lro_gen_skb() alignment
2007-12-05 05:37:32 -08:00
[NETNS]: Add namespace parameter to ip_dev_find.
2008-01-28 15:11:04 -08:00
Introduce new section reference annotations tags: __ref, __refdata, __refconst
2008-01-28 23:21:19 +01:00
ioprio: move io priority from task_struct to io_context
2008-01-28 10:50:29 +01:00
Input: adds the context menu key (HUT GenDesc 0x84)
2007-11-27 00:47:04 -05:00
Preempt-RCU: Use softirq instead of tasklets for
2008-01-25 21:08:23 +01:00
block: cfq: make the io contect sharing lockless
2008-01-28 10:50:33 +01:00
ioprio: move io priority from task_struct to io_context
2008-01-28 10:50:29 +01:00
IPMI: fix comparison in demangle_device_id
2007-10-30 08:06:55 -07:00
genirq: add unlocked version of set_irq_handler()
2007-12-18 18:05:58 +01:00
jbd: Fix assertion failure in fs/jbd/checkpoint.c
2007-12-05 09:21:20 -08:00
jbd2: add lockdep support
2008-01-28 23:58:27 -05:00
timers: don't #error on higher HZ values
2008-01-25 21:08:34 +01:00
Missing include file in kallsyms.h
2007-11-05 15:12:32 -08:00
Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net-2.6.25
2008-01-29 22:54:01 +11:00
Fix <linux/kd.h> usage in userspace
2007-11-29 09:24:52 -08:00
sched: do not do cond_resched() when CONFIG_PREEMPT
2008-01-25 21:08:28 +01:00
KEYS: fix macro
2008-01-08 16:10:35 -08:00
Kobject: fix coding style issues in kobject.h
2008-01-24 21:27:06 -08:00
kref: add kref_set()
2008-01-24 20:40:05 -08:00
sched: latencytop support
2008-01-25 21:08:34 +01:00
leds: Fix led trigger locking bugs
2007-12-07 09:06:53 +00:00
lguest: documentation update
2007-10-25 15:02:50 +10:00
lguest: documentation update
2007-10-25 15:02:50 +10:00
libata: factor out ata_pci_activate_sff_host() from ata_pci_one()
2008-01-23 05:24:16 -05:00
rtc: fall back to requesting only the ports we actually use
2007-11-14 18:45:41 -08:00
Security: remove security.h include from mm.h
2008-01-25 11:29:49 +11:00
Virtio interface
2007-10-23 15:49:54 +10:00
Merge git://git.kernel.org/pub/scm/linux/kernel/git/sam/kbuild
2008-01-29 22:46:14 +11:00
remove __attribute_used__
2008-01-28 23:21:18 +01:00
[IPV4]: Clean the ip_sockglue.c from some ugly ifdefs
2007-11-07 04:08:55 -08:00
[I2C] Split mv643xx I2C platform support
2008-01-26 15:03:59 +00:00
mv643xx_eth: Fix MV643XX_ETH offsets used by Pegasos 2
2007-10-30 14:32:16 -04:00
[I2C] i2c-mv64xxx: Don't set i2c_adapter.retries
2008-01-26 15:04:01 +00:00
[NET]: Remove the empty net_table
2008-01-28 14:56:29 -08:00
[NET]: Add NAPI_STATE_DISABLE.
2008-01-08 23:30:07 -08:00
[NETFILTER]: Extend nf_inet_addr with in{,6}_addr
2008-01-28 15:02:22 -08:00
[NETFILTER]: bridge: fix missing link layer headers on outgoing routed packets
2007-12-14 13:54:39 -08:00
[NETFILTER]: Introduce NF_INET_ hook values
2008-01-28 14:53:55 -08:00
[NETFILTER]: Introduce NF_INET_ hook values
2008-01-28 14:53:55 -08:00
[NETNS]: Consolidate kernel netlink socket destruction.
2008-01-28 15:08:07 -08:00
[NETPOLL]: Don't need rx_flags.
2008-01-28 14:54:18 -08:00
NFS: make nfs_wb_page_priority() static
2007-11-26 16:24:48 -05:00
cfg80211/nl80211: implement station attribute retrieval
2008-01-28 14:59:52 -08:00
cpu-hotplug: replace per-subsystem mutexes with get_online_cpus()
2008-01-25 21:08:02 +01:00
[PARPORT] Remove unused 'irq' argument from parport irq functions
2007-10-23 19:53:16 -04:00
remove __attribute_used__
2008-01-28 23:21:18 +01:00
kset: convert pci hotplug to use kset_create_and_add
2008-01-24 20:40:14 -08:00
Add rtl8180 wireless driver
2008-01-28 15:09:35 -08:00
[LIB] pcounter : unline too big functions
2008-01-28 15:00:35 -08:00
PHY: Add the phy_device_release device method.
2007-12-04 15:06:33 -05:00
pidns: Place under CONFIG_EXPERIMENTAL
2007-11-14 18:45:43 -08:00
[NET_SCHED]: sch_api: introduce constant for rate table size
2008-01-28 15:11:21 -08:00
pktcdvd: Convert from class_device to device for block/pktcdvd
2008-01-24 20:40:06 -08:00
Driver Core: constify the name passed to platform_device_register_simple
2008-01-24 20:40:43 -08:00
PM: ACPI and APM must not be enabled at the same time
2008-01-11 12:26:47 -05:00
PM: ACPI and APM must not be enabled at the same time
2008-01-11 12:26:47 -05:00
increase PNP_MAX_PORT to 40 from 24
2007-12-27 23:55:13 -05:00
[ATM]: Oops reading net/atm/arp
2008-01-28 15:01:36 -08:00
restrict reading from /proc/<pid>/maps to those who share ->mm or can ptrace pid
2008-01-02 13:13:27 -08:00
quicklists: do not release off node pages early
2007-12-23 12:54:36 -08:00
Preempt-RCU: implementation
2008-01-25 21:08:24 +01:00
Preempt-RCU: implementation
2008-01-25 21:08:24 +01:00
Preempt-RCU: implementation
2008-01-25 21:08:24 +01:00
Preempt-RCU: implementation
2008-01-25 21:08:24 +01:00
RTC: convert mutex to bitfield
2007-11-29 09:24:54 -08:00
[NET]: Make rtnetlink infrastructure network namespace aware (v3)
2008-01-28 14:54:25 -08:00
SG: work with the SCSI fixed maximum allocations.
2008-01-28 10:54:49 +01:00
kernel: add CLONE_IO to specifically request sharing of IO contexts
2008-01-28 10:50:36 +01:00
x86_64 EFI boot support: EFI frame buffer driver
2007-11-29 09:24:54 -08:00
security/selinux: constify function pointer tables and fields
2008-01-25 11:29:54 +11:00
SELinux: Enable dynamic enable/disable of the network access checks
2008-01-30 08:17:26 +11:00
[NET]: Consolidate net namespace related proc files creation.
2008-01-28 14:54:28 -08:00
IP22ZILOG: fix lockup and sysrq
2007-11-29 09:24:53 -08:00
[UDP]: Only increment counter on first peek/recv
2008-01-28 14:56:34 -08:00
Unify /proc/slabinfo configuration
2008-01-02 13:04:48 -08:00
Unify /proc/slabinfo configuration
2008-01-02 13:04:48 -08:00
Unify /proc/slabinfo configuration
2008-01-02 13:04:48 -08:00
KVM: fix !SMP build error
2007-11-09 22:39:38 +01:00
sched: remove the !PREEMPT_BKL code
2008-01-25 21:08:33 +01:00
[XFRM]: Define packet dropping statistics.
2008-01-28 14:59:38 -08:00
[NET] sysctl: make sysctl_somaxconn per-namespace
2008-01-28 14:56:57 -08:00
[SPLICE]: Don't assume regular pages in splice_to_pipe()
2008-01-28 14:53:30 -08:00
sched: latencytop support
2008-01-25 21:08:34 +01:00
[TIPC]: Fix headercheck wrt. tipc_config.h
2007-10-30 21:44:00 -07:00
sysctl: Infrastructure for per namespace sysctls
2008-01-28 14:55:17 -08:00
Driver core: change sysdev classes to use dynamic kobject names
2008-01-24 20:40:40 -08:00
[SCSI] sysfs: add filter function to groups
2008-01-23 11:29:18 -06:00
[TCP]: Rewrite SACK block processing & sack_recv_cache use
2008-01-28 14:54:07 -08:00
futex: fix for futex_wait signal stack corruption
2007-12-05 15:46:09 +01:00
tifm: Convert from class_device to device for TI flash media
2008-01-24 20:40:06 -08:00
time: add ADJ_OFFSET_SS_READ
2007-11-26 20:42:19 +01:00
sched: whitespace cleanups in topology.h
2008-01-25 21:08:20 +01:00
[CAN]: Allocate protocol numbers for PF_CAN
2008-01-28 14:54:09 -08:00
fix abuses of ptrdiff_t
2007-10-29 07:41:33 -07:00
UIO: fix kobject usage
2008-01-24 20:40:26 -08:00
usb.h: fix kernel-doc warning
2007-12-17 10:47:15 -08:00
usb-storage: Fix devices that cannot handle 32k transfers
2007-12-17 10:47:14 -08:00
USB: Fix signr comment in usbdevice_fs.h
2007-11-28 13:58:34 -08:00
[VETH]: move veth.h to include/linux
2007-12-26 19:36:35 -08:00
Virtio interface
2007-10-23 15:49:54 +10:00
9p: add virtio transport
2007-10-23 13:47:31 -05:00
Block driver using virtio.
2007-10-23 15:49:54 +10:00
Virtio interface
2007-10-23 15:49:54 +10:00
Virtio console driver
2007-10-23 15:49:55 +10:00
Net driver using virtio
2007-10-23 15:49:54 +10:00
virtio: Force use of power-of-two for descriptor ring sizes
2007-11-12 13:59:40 +11:00
introduce WEXT scan capabilities
2008-01-28 14:58:25 -08:00
lockdep: fix workqueue creation API lockdep interaction
2008-01-16 09:51:58 +01:00
Revert "writeback: introduce writeback_control.more_io to indicate more io"
2008-01-14 21:21:29 -08:00
[XFRM]: Fix struct xfrm_algo code formatting.
2008-01-28 15:02:01 -08:00
