 James Morris
|
6f799c97f3
Merge branch 'master' of git://git.infradead.org/users/pcmoore/selinux into ra-next
|
11 years ago |
 fan.du
|
ca4c3fc24e
net: split rt_genid for ipv4 and ipv6
|
12 years ago |
 Paul Moore
|
bed4d7efb3
selinux: remove the BUG_ON() from selinux_skb_xfrm_sid()
|
12 years ago |
|
Paul Moore
|
d1b17b09f3
selinux: cleanup the XFRM header
|
12 years ago |
|
Paul Moore
|
eef9b41622
selinux: cleanup selinux_xfrm_sock_rcv_skb() and selinux_xfrm_postroute_last()
|
12 years ago |
|
Paul Moore
|
2e5aa86609
lsm: split the xfrm_state_alloc_security() hook implementation
|
12 years ago |
 Nicolas Dichtel
|
ee8372dd19
xfrm: invalidate dst on policy insertion/deletion
|
13 years ago |
 David Howells
|
778aae84ef
SELinux: selinux/xfrm.h needs net/flow.h
|
13 years ago |
 David S. Miller
|
e33f770426
xfrm: Mark flowi arg to security_xfrm_state_pol_flow_match() const.
|
14 years ago |
 Thomas Liu
|
2bf4969032
SELinux: Convert avc_audit to use lsm_audit.h
|
16 years ago |
 James Morris
|
be940d6279
Revert "SELinux: Convert avc_audit to use lsm_audit.h"
|
16 years ago |
|
Thomas Liu
|
8113a8d80f
SELinux: Convert avc_audit to use lsm_audit.h
|
16 years ago |
 Paul Moore
|
03e1ad7b5d
LSM: Make the Labeled IPsec hooks more stack friendly
|
17 years ago |
|
Paul Moore
|
d621d35e57
SELinux: Enable dynamic enable/disable of the network access checks
|
17 years ago |
 Venkat Yekkirala
|
342a0cff0a
[SELINUX]: Fix 2.6.20-rc6 build when no xfrm
|
18 years ago |
|
Paul Moore
|
3de4bab5b9
SELinux: peer secid consolidation for external network labeling
|
18 years ago |
|
Venkat Yekkirala
|
67f83cbf08
SELinux: Fix SA selection semantics
|
18 years ago |
|
Venkat Yekkirala
|
6b877699c6
SELinux: Return correct context for SO_PEERSEC
|
18 years ago |
|
Venkat Yekkirala
|
c1a856c964
SELinux: Various xfrm labeling fixes
|
18 years ago |
|
Venkat Yekkirala
|
5b368e61c2
IPsec: correct semantics for SELinux policy matching
|
19 years ago |
|
Venkat Yekkirala
|
a51c64f1e5
[MLSXFRM]: Fix build with SECURITY_NETWORK_XFRM disabled.
|
19 years ago |
|
Venkat Yekkirala
|
cb969f072b
[MLSXFRM]: Default labeling of socket specific IPSec policies
|
19 years ago |
|
Venkat Yekkirala
|
beb8d13bed
[MLSXFRM]: Add flow labeling
|
19 years ago |
|
Venkat Yekkirala
|
e0d1caa7b0
[MLSXFRM]: Flow based matching of xfrm policy and state
|
19 years ago |
|
James Morris
|
4e5ab4cb85
[SECMARK]: Add new packet controls to SELinux
|
19 years ago |
 Catherine Zhang
|
c8c05a8eec
[LSM-IPsec]: SELinux Authorize
|
19 years ago |
|
Catherine Zhang
|
e6f507196c
[SELINUX]: selinux_socket_getpeer_{stream,dgram} fixup
|
19 years ago |
|
Catherine Zhang
|
2c7946a7bf
[SECURITY]: TCP/UDP getpeersec
|
19 years ago |
 Trent Jaeger
|
d28d1e0801
[LSM-IPSec]: Per-packet access control.
|
19 years ago |
