| From: |
| Paul Moore <paul.moore@hp.com> |
| To: |
| linux-security-module@vger.kernel.org |
| Subject: |
| [RFC PATCH v3 0/3] Labeled networking patches for 2.6.29 |
| Date: |
| Thu, 04 Dec 2008 18:11:14 -0500 |
| Message-ID: |
| <20081204230658.9427.68883.stgit@flek.lan> |
| Cc: |
| casey@schaufler-ca.com |
The latest, and likely last, RFC labeled networking patch for 2.6.29. The big
changes since last posting are the inclusion of a patch to deprecate the legacy
"compat_net" functionality in SELinux (already discussed on the SELinux list)
and the inclusion of static label support in Smack compliments of Casey. I've
updated the lblnet-2.6_next tree with all of the patches which means that
hopefully the December 5th tree should have all these bits included. In the
meantime if you want to see the patches in git form you can find them at the
locations below:
* git://git.infradead.org/users/pcmoore/lblnet-2.6_next
* http://git.infradead.org/users/pcmoore/lblnet-2.6_next
Thanks.
---
Casey Schaufler (1):
smack: Add support for unlabeled network hosts and networks
Paul Moore (2):
selinux: Deprecate and schedule the removal of the the compat_net
functionality
netlabel: Update kernel configuration API
Documentation/feature-removal-schedule.txt | 12 +
include/net/cipso_ipv4.h | 6
include/net/netlabel.h | 86 ++++++-
net/ipv4/cipso_ipv4.c | 86 +++++--
net/netlabel/netlabel_cipso_v4.c | 61 +----
net/netlabel/netlabel_domainhash.c | 63 +++++
net/netlabel/netlabel_domainhash.h | 4
net/netlabel/netlabel_kapi.c | 345 ++++++++++++++++++++++----
net/netlabel/netlabel_unlabeled.c | 26 +-
net/netlabel/netlabel_unlabeled.h | 15 +
security/selinux/Kconfig | 27 --
security/selinux/hooks.c | 6
security/selinux/selinuxfs.c | 16 +
security/smack/smack.h | 31 ++
security/smack/smack_access.c | 28 +-
security/smack/smack_lsm.c | 308 +++++++++++++++++++----
security/smack/smackfs.c | 369 ++++++++++++++++++----------
17 files changed, 1115 insertions(+), 374 deletions(-)
--
To unsubscribe from this list: send the line "unsubscribe linux-security-module" in
the body of a message to majordomo@vger.kernel.org
More majordomo info at http://vger.kernel.org/majordomo-info.html