Paul Moore
8cc44579d1
NetLabel: Introduce static network labels for unlabeled connections ...
Most trusted OSs, with the exception of Linux, have the ability to specify
static security labels for unlabeled networks. This patch adds this ability to
the NetLabel packet labeling framework.
If the NetLabel subsystem is called to determine the security attributes of an
incoming packet it first checks to see if any recognized NetLabel packet
labeling protocols are in-use on the packet. If none can be found then the
unlabled connection table is queried and based on the packets incoming
interface and address it is matched with a security label as configured by the
administrator using the netlabel_tools package. The matching security label is
returned to the caller just as if the packet was explicitly labeled using a
labeling protocol.
Signed-off-by: Paul Moore <paul.moore@hp.com>
Signed-off-by: James Morris <jmorris@namei.org>
2008-01-30 08:17:28 +11:00
[VLAN]: sparse warning fix
2008-01-28 15:10:17 -08:00
[APPLETALK]: Annotations to clear sparse warnings
2008-01-28 15:02:43 -08:00
[NETNS]: Add namespace parameter to ip_route_output_key.
2008-01-28 15:11:07 -08:00
[AX25]: sparse cleanups
2008-01-28 15:02:03 -08:00
[BLUETOOTH]: Use sockfd_put()
2008-01-28 15:00:48 -08:00
[NETNS]: Add namespace parameter to ip_route_output_key.
2008-01-28 15:11:07 -08:00
[NET_SCHED]: Convert packet schedulers from rtnetlink to new netlink API
2008-01-28 15:11:10 -08:00
[NETNS]: Add namespace parameter to ip_route_output_flow.
2008-01-28 15:11:06 -08:00
[NETNS]: FIB rules API cleanup.
2008-01-28 15:08:13 -08:00
[ETH]: Combine format_addr() with print_mac().
2008-01-28 15:00:05 -08:00
ieee80211: beacon->capability is little-endian
2008-01-28 15:08:48 -08:00
NetLabel: Add secid token support to the NetLabel secattr struct
2008-01-30 08:17:19 +11:00
[IPV6] ADDRLABEL: Fix double free on label deletion.
2008-01-28 15:46:02 -08:00
[NET]: Simple ctl_table to ctl_path conversions.
2008-01-28 15:01:07 -08:00
[IrDA]: LMP discovery timer not started by default
2008-01-28 15:10:54 -08:00
[IUCV]: use LIST_HEAD instead of LIST_HEAD_INIT
2008-01-28 14:56:54 -08:00
[XFRM] xfrm_policy_destroy: Rename and relative fixes.
2008-01-28 15:00:46 -08:00
[NET]: Simple ctl_table to ctl_path conversions.
2008-01-28 15:01:07 -08:00
[NET_SCHED]: Convert packet schedulers from rtnetlink to new netlink API
2008-01-28 15:11:10 -08:00
SELinux: Enable dynamic enable/disable of the network access checks
2008-01-30 08:17:26 +11:00
NetLabel: Introduce static network labels for unlabeled connections
2008-01-30 08:17:28 +11:00
[NETLINK]: Add nla_append()
2008-01-28 15:11:09 -08:00
[NET]: Simple ctl_table to ctl_path conversions.
2008-01-28 15:01:07 -08:00
[PACKET]: Fix sparse warnings in af_packet.c
2008-01-28 15:00:48 -08:00
[ROSE]: Supress sparse warnings
2008-01-28 15:02:44 -08:00
[NETNS]: Add namespace parameter to ip_route_output_key.
2008-01-28 15:11:07 -08:00
[NET_SCHED]: Use nla_policy for attribute validation in ematches
2008-01-28 15:11:24 -08:00
[NETNS]: Add namespace parameter to ip_route_output_key.
2008-01-28 15:11:07 -08:00
[NET]: Add some acquires/releases sparse annotations.
2008-01-28 15:00:31 -08:00
[TIPC]: Use tipc_port_unlock
2008-01-28 15:01:05 -08:00
[NET]: Add some acquires/releases sparse annotations.
2008-01-28 15:00:31 -08:00
WEXT: remove unused variable
2008-01-28 15:10:48 -08:00
[AF_X25]: constify function pointer tables
2008-01-28 15:10:55 -08:00
[NETNS]: Consolidate kernel netlink socket destruction.
2008-01-28 15:08:07 -08:00
[NETFILTER]: ip6_tables: add compat support
2008-01-28 14:58:36 -08:00
[NETFILTER]: Add CONFIG_NETFILTER_ADVANCED option
2008-01-28 14:59:12 -08:00
[NET] sysctl: make sysctl_somaxconn per-namespace
2008-01-28 14:56:57 -08:00
8cc44579d1