|
@@ -959,6 +959,12 @@ static inline void security_free_mnt_opts(struct security_mnt_opts *opts)
|
|
|
* Sets the new child socket's sid to the openreq sid.
|
|
|
* @inet_conn_established:
|
|
|
* Sets the connection's peersid to the secmark on skb.
|
|
|
+ * @secmark_relabel_packet:
|
|
|
+ * check if the process should be allowed to relabel packets to the given secid
|
|
|
+ * @security_secmark_refcount_inc
|
|
|
+ * tells the LSM to increment the number of secmark labeling rules loaded
|
|
|
+ * @security_secmark_refcount_dec
|
|
|
+ * tells the LSM to decrement the number of secmark labeling rules loaded
|
|
|
* @req_classify_flow:
|
|
|
* Sets the flow's sid to the openreq sid.
|
|
|
* @tun_dev_create:
|
|
@@ -1593,6 +1599,9 @@ struct security_operations {
|
|
|
struct request_sock *req);
|
|
|
void (*inet_csk_clone) (struct sock *newsk, const struct request_sock *req);
|
|
|
void (*inet_conn_established) (struct sock *sk, struct sk_buff *skb);
|
|
|
+ int (*secmark_relabel_packet) (u32 secid);
|
|
|
+ void (*secmark_refcount_inc) (void);
|
|
|
+ void (*secmark_refcount_dec) (void);
|
|
|
void (*req_classify_flow) (const struct request_sock *req, struct flowi *fl);
|
|
|
int (*tun_dev_create)(void);
|
|
|
void (*tun_dev_post_create)(struct sock *sk);
|
|
@@ -2547,6 +2556,9 @@ void security_inet_csk_clone(struct sock *newsk,
|
|
|
const struct request_sock *req);
|
|
|
void security_inet_conn_established(struct sock *sk,
|
|
|
struct sk_buff *skb);
|
|
|
+int security_secmark_relabel_packet(u32 secid);
|
|
|
+void security_secmark_refcount_inc(void);
|
|
|
+void security_secmark_refcount_dec(void);
|
|
|
int security_tun_dev_create(void);
|
|
|
void security_tun_dev_post_create(struct sock *sk);
|
|
|
int security_tun_dev_attach(struct sock *sk);
|
|
@@ -2701,6 +2713,19 @@ static inline void security_inet_conn_established(struct sock *sk,
|
|
|
{
|
|
|
}
|
|
|
|
|
|
+static inline int security_secmark_relabel_packet(u32 secid)
|
|
|
+{
|
|
|
+ return 0;
|
|
|
+}
|
|
|
+
|
|
|
+static inline void security_secmark_refcount_inc(void)
|
|
|
+{
|
|
|
+}
|
|
|
+
|
|
|
+static inline void security_secmark_refcount_dec(void)
|
|
|
+{
|
|
|
+}
|
|
|
+
|
|
|
static inline int security_tun_dev_create(void)
|
|
|
{
|
|
|
return 0;
|