Huw Davies 2917f57b6b calipso: Allow the lsm to label the skbuff directly. ...

In some cases, the lsm needs to add the label to the skbuff directly.
A NF_INET_LOCAL_OUT IPv6 hook is added to selinux to match the IPv4
behaviour.  This allows selinux to label the skbuffs that it requires.

Signed-off-by: Huw Davies <huw@codeweavers.com>
Signed-off-by: Paul Moore <paul@paul-moore.com>

2016-06-27 15:06:15 -04:00

..

include

selinux: distinguish non-init user namespace capability checks

2016-04-26 15:41:43 -04:00

ss

selinux: import NetLabel category bitmaps correctly

2016-06-09 10:40:37 -04:00

.gitignore

SELinux: add .gitignore files for dynamic classes

2009-10-24 09:42:27 +08:00

avc.c

Merge branch 'next' of git://git.infradead.org/users/pcmoore/selinux into next

2015-08-15 13:29:57 +10:00

exports.c

selinux: sparse fix: include selinux.h in exports.c

2011-09-09 16:56:32 -07:00

hooks.c

calipso: Allow the lsm to label the skbuff directly.

2016-06-27 15:06:15 -04:00

Kconfig

selinux: change CONFIG_SECURITY_SELINUX_CHECKREQPROT_VALUE default

2015-10-21 17:44:25 -04:00

Makefile

selinux: use absolute path to include directory

2016-01-28 10:37:15 -05:00

netif.c

Merge commit 'v3.17' into next

2014-11-19 21:32:12 +11:00

netlabel.c

calipso: Allow request sockets to be relabelled by the lsm.

2016-06-27 15:05:29 -04:00

netlink.c

selinux: replace obsolete NLMSG_* with type safe nlmsg_*

2013-03-28 14:25:49 -04:00

netnode.c

selinux: remove unused variabled in the netport, netnode, and netif caches

2014-08-07 20:55:30 -04:00

netport.c

selinux: remove unused variabled in the netport, netnode, and netif caches

2014-08-07 20:55:30 -04:00

nlmsgtab.c

selinux: nlmsgtab: add SOCK_DESTROY to the netlink mapping tables

2016-02-09 04:55:05 -05:00

selinuxfs.c

selinux: fix type mismatch

2016-06-15 16:20:28 -04:00

xfrm.c

netfilter: Remove spurios included of netfilter.h

2015-06-18 21:14:32 +02:00