repo.or.cz
/
linux-2.6.git
/
search
commit
grep
author
committer
pickaxe
?
search:
re
summary
|
log
|
graphiclog1
|
graphiclog2
|
commit
|
commitdiff
|
tree
|
refs
|
edit
|
fork
first
·
prev
·
next
uml: fix URLs in Kconfig and help strings
2008-02-05
Paul Moore
NetLabel: introduce
a
new
kernel configura
t
ion API
.
.
.
Signed-off-by:
Paul Moore
<paul.moore@hp.com>
commit
|
commitdiff
|
tree
2008-02-01
Paul Moore
[S
E
Lin
u
x
]
:
Fix do
u
ble free in
s
elinux_net
l
bl_
s
oc
k
_se
t
s
i
d()
Signed-off-by:
Paul Moore
<paul.moore@hp.com>
commit
|
commitdiff
|
tree
2008-01-29
Paul Moore
S
E
Linux
:
Add warning m
e
s
s
a
g
es on network d
e
nial due
.
.
.
Signed-off-by:
Paul Moore
<paul.moore@hp.com>
commit
|
commitdiff
|
tree
2008-01-29
Paul M
o
or
e
SELinux:
A
dd
network ingre
s
s and
e
g
ress control
p
e
r
m
issi
o
n
.
.
.
Signed-off-by:
Paul Moore
<paul.moore@hp.com>
commit
|
commitdiff
|
tree
2008-01-29
Pa
u
l
Moore
N
e
tLabe
l
: Add auditing to the static
l
a
beli
n
g mechanism
Signed-off-by:
Paul Moore
<paul.moore@hp.com>
commit
|
commitdiff
|
tree
2008-01-29
Paul Moore
N
e
tLabel:
I
n
tr
o
duce sta
t
ic network labels for unla
b
eled
.
.
.
Signed-off-by:
Paul Moore
<paul.moore@hp.com>
commit
|
commitdiff
|
tree
2008-01-29
Paul Moore
SEL
i
nux: A
l
l
o
w NetLabel to dire
c
tly cache SIDs
Signed-off-by:
Paul Moore
<paul.moore@hp.com>
commit
|
commitdiff
|
tree
2008-01-29
P
aul Moore
SELinux: Enable dyn
a
mic enable/d
i
sabl
e
of the n
e
twork
.
.
.
Signed-off-by:
Paul Moore
<paul.moore@hp.com>
commit
|
commitdiff
|
tree
2008-01-29
Paul Moore
S
E
Li
n
ux: Be
t
ter integration bet
w
een p
e
er labe
l
i
n
g subsy
s
te
m
s
Signed-off-by:
Paul Moore
<paul.moore@hp.com>
commit
|
commitdiff
|
tree
2008-01-29
Paul
M
oore
SEL
i
n
ux: Add a ne
w
p
e
er class and permissions
to the
.
.
.
Signed-off-by:
Paul Moore
<paul.moore@hp.com>
commit
|
commitdiff
|
tree
2008-01-29
Paul Moore
S
E
Linux: Ad
d
a capa
b
ili
t
ies b
i
tmap to
S
ELinux policy
.
.
.
Signed-off-by:
Paul Moore
<paul.moore@hp.com>
commit
|
commitdiff
|
tree
2008-01-29
Paul Moore
SELinux: Add a network
node cac
h
i
n
g mechanism
s
imilar
.
.
.
Signed-off-by:
Paul Moore
<paul.moore@hp.com>
commit
|
commitdiff
|
tree
2008-01-29
Pau
l
Moore
SELinux:
O
n
ly store the
network
i
nt
e
rface's ifind
e
x
Signed-off-by:
Paul Moore
<paul.moore@hp.com>
commit
|
commitdiff
|
tree
2008-01-29
Pau
l
Moore
S
E
Linux: Convert the
netif co
d
e
to
u
se ifindex values
Signed-off-by:
Paul Moore
<paul.moore@hp.com>
commit
|
commitdiff
|
tree
2008-01-29
Paul Moore
Net
L
abe
l
: Ad
d
IP
addre
s
s family
information to th
e
.
.
.
Signed-off-by:
Paul Moore
<paul.moore@hp.com>
commit
|
commitdiff
|
tree
2008-01-29
Paul
M
o
ore
NetLab
e
l: Add secid to
k
e
n support to t
h
e
NetL
a
bel secattr
.
.
.
Signed-off-by:
Paul Moore
<paul.moore@hp.com>
commit
|
commitdiff
|
tree
2008-01-29
Pa
u
l
M
oore
Net
L
abel: Consol
i
date the LSM
domai
n
mappi
n
g
/
hashing
.
.
.
Signed-off-by:
Paul Moore
<paul.moore@hp.com>
commit
|
commitdiff
|
tree
2008-01-29
Paul Moore
Net
L
abel: Cleanup
t
h
e
LS
M
d
omain
hash f
u
nctions
Signed-off-by:
Paul Moore
<paul.moore@hp.com>
commit
|
commitdiff
|
tree
2008-01-29
P
a
ul
Moore
Ne
t
Label: Remove unneeded RCU read locks
Signed-off-by:
Paul Moore
<paul.moore@hp.com>
commit
|
commitdiff
|
tree
2008-01-28
P
a
ul Moore
[XFRM
]
: Drop packets when replay counter
w
ould
o
verfl
o
w
Signed-off-by:
Paul Moore
<paul.moore@hp.com>
commit
|
commitdiff
|
tree
2008-01-28
P
aul Moore
[XFRM]
:
RFC4303 compliant
a
uditing
Signed-off-by:
Paul Moore
<paul.moore@hp.com>
commit
|
commitdiff
|
tree
2008-01-28
P
aul Moore
[XFRM]: Assorted IPsec fi
x
ups
Signed-off-by:
Paul Moore
<paul.moore@hp.com>
commit
|
commitdiff
|
tree
2008-01-28
Paul Moore
[I
P
SEC
]
:
SPD
a
uditing fix to include the ne
t
mask/pr
e
fix
.
.
.
Signed-off-by:
Paul Moore
<paul.moore@hp.com>
commit
|
commitdiff
|
tree
2008-01-21
Paul Mo
o
r
e
seli
n
ux: fix memory le
a
k
i
n netlabel code
Signed-off-by:
Paul Moore
<paul.moore@hp.com>
commit
|
commitdiff
|
tree
2008-01-09
Paul Moo
r
e
[
N
ET]: Cl
o
ne the sk_buff 'i
i
f' field in __skb_clone()
Signed-off-by:
Paul Moore
<paul.moore@hp.com>
commit
|
commitdiff
|
tree
2007-12-20
Paul Moo
r
e
[XFR
M
]: Audi
t
function argum
e
nts misordered
Signed-off-by:
Paul Moore
<paul.moore@hp.com>
commit
|
commitdiff
|
tree
2007-12-14
Paul
M
o
ore
[XFRM]: Display the au
d
ite
d
SPI val
u
e
in
h
o
s
t byte
.
.
.
Signed-off-by:
Paul Moore
<paul.moore@hp.com>
commit
|
commitdiff
|
tree
2007-10-26
Pau
l
M
oore
[
N
etL
a
bel]
:
correct usage of RCU lockin
g
Signed-off-by:
Paul Moore
<paul.moore@hp.com>
commit
|
commitdiff
|
tree
2007-10-10
Pa
u
l Moore
[CI
P
SO]: r
e
move d
u
plicated code in the cipso
_
v4_*_
g
et
a
ttr
.
.
.
Signed-off-by:
Paul Moore
<paul.moore@hp.com>
commit
|
commitdiff
|
tree
2007-08-08
P
aul Moor
e
[NetLabel]: add mis
s
ing rc
u
_
dereference()
c
a
l
ls
in
.
.
.
Signed-off-by:
Paul Moore
<paul.moore@hp.com>
commit
|
commitdiff
|
tree
2007-08-02
P
aul Moore
Net/Sec
u
rity: fix memo
r
y
leaks fro
m
secu
r
ity_s
e
cid_to_se
c
ctx()
Signed-off-by:
Paul Moore
<paul.moore@hp.com>
commit
|
commitdiff
|
tree
2007-08-02
Paul
Moo
r
e
SELinux: remove
redunda
n
t pointer ch
e
cks
b
e
fo
r
e call
i
ng
.
.
.
Signed-off-by:
Paul Moore
<paul.moore@hp.com>
commit
|
commitdiff
|
tree
2007-08-02
Pau
l
Moore
SE
L
i
n
ux: restore proper Net
L
abel
caching b
e
havior
Signed-off-by:
Paul Moore
<paul.moore@hp.com>
commit
|
commitdiff
|
tree
2007-07-19
Paul
M
oore
SEL
i
nux: use
SECINI
T
SID_NET
M
SG ins
t
e
ad o
f
SECIN
I
TSID_UNLABEL
.
.
.
Signed-off-by:
Paul Moore
<paul.moore@hp.com>
commit
|
commitdiff
|
tree
2007-07-19
P
a
ul Moore
SELinux: enable
d
ynamic activ
a
tion/deacti
v
ation of
.
.
.
Signed-off-by:
Paul Moore
<paul.moore@hp.com>
commit
|
commitdiff
|
tree
2007-07-12
Paul M
o
ore
SELin
u
x: u
s
e SECIN
I
TSID_NETMSG inst
e
a
d
of SECI
N
ITSID_UNLABE
L
.
.
.
Signed-off-by:
Paul Moore
<paul.moore@hp.com>
commit
|
commitdiff
|
tree
2007-06-08
Paul Moor
e
[CIP
S
O]:
F
ix se
v
e
r
al unaligned kern
e
l acce
s
ses
i
n the
.
.
.
Signed-off-by:
Paul Moore
<paul.moore@hp.com>
commit
|
commitdiff
|
tree
2007-06-08
Paul Moore
[NetLabel]: conso
l
id
a
te the struct socket/soc
k
handlin
g
.
.
.
Signed-off-by:
Paul Moore
<paul.moore@hp.com>
commit
|
commitdiff
|
tree
2007-04-26
P
a
u
l Moore
S
E
Linux
:
m
o
ve se
c
urity_skb_extlbl_sid() o
u
t of the
.
.
.
Signed-off-by:
Paul Moore
<paul.moore@hp.com>
commit
|
commitdiff
|
tree
2007-04-26
P
a
ul
M
o
ore
SELinux
:
rename sel
i
n
u
x_net
l
abel
.
h to netlabel
.
h
Signed-off-by:
Paul Moore
<paul.moore@hp.com>
commit
|
commitdiff
|
tree
2007-04-26
Paul Moore
SELinu
x
: extract the NetL
a
bel SELinux support
from
.
.
.
Signed-off-by:
Paul Moore
<paul.moore@hp.com>
commit
|
commitdiff
|
tree
2007-04-26
Paul M
o
ore
NetLabe
l
:
conv
e
rt a BUG_ON in the CIPSO cod
e
to a runtime
.
.
.
Signed-off-by:
Paul Moore
<paul.moore@hp.com>
commit
|
commitdiff
|
tree
2007-04-26
Paul Moore
NetLabel: cleanup and document CI
P
S
O
constants
Signed-off-by:
Paul Moore
<paul.moore@hp.com>
commit
|
commitdiff
|
tree
2007-03-12
Paul Moor
e
[NetLabel]: parse the CIPSO ranged ta
g
o
n incoming
.
.
.
Signed-off-by:
Paul Moore
<paul.moore@hp.com>
commit
|
commitdiff
|
tree
2007-03-03
Paul Moore
[NetLabel]
:
V
e
rify sensitivity level
h
as a
v
al
i
d CIPSO
.
.
.
Signed-off-by:
Paul Moore
<paul.moore@hp.com>
commit
|
commitdiff
|
tree
2007-01-09
Paul Moore
[
I
NE
T
]: style
updates for
th
e
i
n
et_sock->is_icsk as
s
ignme
n
t fix
Signed-off-by:
Paul Moore
<paul.moore@hp.com>
commit
|
commitdiff
|
tree
2007-01-09
Paul Moore
NetLabe
l
: corr
e
ct CIPSO tag h
a
ndling wh
e
n a
d
ding new
.
.
.
Signed-off-by:
Paul Moore
<paul.moore@hp.com>
commit
|
commitdiff
|
tree
2007-01-09
P
aul Moor
e
N
e
tLabel
:
c
o
rrect l
o
cking in s
e
l
inux_netlbl_socket
_
setsid()
Signed-off-by:
Paul Moore
<paul.moore@hp.com>
commit
|
commitdiff
|
tree
2007-01-09
Paul
M
oore
[INET]: Fix inco
r
rect
"
inet_sock->is_i
c
s
k
" assi
g
nment
.
Signed-off-by:
Paul Moore
<paul.moore@hp.com>
commit
|
commitdiff
|
tree
2006-12-22
P
a
ul M
o
o
re
Ne
t
L
ab
e
l: corr
e
ctly fill in un
u
s
ed CIPSOv4
l
evel and
.
.
.
Signed-off-by:
Paul Moore
<paul.moore@hp.com>
commit
|
commitdiff
|
tree
2006-12-22
P
aul Moo
r
e
Ne
t
Label: perf
o
r
m input validat
i
o
n earl
i
er on CIPSOv4
.
.
.
Signed-off-by:
Paul Moore
<paul.moore@hp.com>
commit
|
commitdiff
|
tree
2006-12-07
Paul Moore
[NETLIK]: Add
a
pointer to the Generic Netlink wiki
.
.
.
Signed-off-by:
Paul Moore
<paul.moore@hp.com>
commit
|
commitdiff
|
tree
2006-12-03
P
a
u
l M
o
ore
NetLabel: add th
e
ranged
tag t
o
the
C
IP
S
Ov4 protocol
Signed-off-by:
Paul Moore
<paul.moore@hp.com>
commit
|
commitdiff
|
tree
2006-12-03
Paul Moore
N
e
tLabel
:
add the
e
numer
a
ted
t
ag t
o
the
C
IPSOv4 p
r
o
t
oco
l
Signed-off-by:
Paul Moore
<paul.moore@hp.com>
commit
|
commitdiff
|
tree
2006-12-03
Paul Moore
NetLabel: conve
r
t to
an extensibi
l
e
/
spar
s
e
c
ategory
.
.
.
Signed-off-by:
Paul Moore
<paul.moore@hp.com>
commit
|
commitdiff
|
tree
2006-12-03
P
a
u
l
M
o
o
re
NetLa
b
el: honor the audit
_
enabled
f
l
a
g
Signed-off-by:
Paul Moore
<paul.moore@hp.com>
commit
|
commitdiff
|
tree
2006-12-03
Paul
M
o
ore
S
E
Linux: peer secid consol
i
dat
i
on for external
network
.
.
.
Signed-off-by:
Paul Moore
<paul.moore@hp.com>
commit
|
commitdiff
|
tree
2006-12-03
Pau
l
Moore
N
e
tL
a
b
el
:
SELinux clea
n
ups
Signed-off-by:
Paul Moore
<paul.moore@hp.com>
commit
|
commitdiff
|
tree
2006-12-03
Paul Moore
Net
L
abel: use cipso_v4
_
d
o
i_searc
h
() for local CI
P
SOv4
.
.
.
Signed-of-by:
Paul Moore
<paul.moore@hp.com>
commit
|
commitdiff
|
tree
2006-12-03
P
aul Moore
NetLabel: u
s
e t
h
e correct
C
IPSOv4 MLS lab
e
l limits
Signed-off-by:
Paul Moore
<paul.moore@hp.com>
commit
|
commitdiff
|
tree
2006-12-03
P
a
ul Moore
Ne
t
La
b
el: r
e
tur
n
th
e
corre
c
t error for
translated C
I
PSOv
4
.
.
.
Signed-off-by:
Paul Moore
<paul.moore@hp.com>
commit
|
commitdiff
|
tree
2006-12-03
Paul Moore
NetLabel:
f
i
x
up t
h
e han
d
ling of CIPSOv4 tags to
a
llow
.
.
.
Signed-off-by:
Paul Moore
<paul.moore@hp.com>
commit
|
commitdiff
|
tree
2006-12-03
Paul M
o
ore
NetLabel: a
d
d
tag verification whe
n
adding new CIPSOv4
.
.
.
Signed-off-by:
Paul Moore
<paul.moore@hp.com>
commit
|
commitdiff
|
tree
2006-12-03
P
a
u
l Moore
NetLa
b
e
l: c
h
eck for a C
I
PSOv4 op
t
ion befo
r
e we do
c
all
.
.
.
Signed-off-by:
Paul Moore
<paul.moore@hp.com>
commit
|
commitdiff
|
tree
2006-12-03
Paul Moore
N
e
tLabel: make n
e
t
l
bl_lsm_seca
t
t
r
str
u
ct easie
r
/quicker
.
.
.
Signed-off-by:
Paul Moore
<paul.moore@hp.com>
commit
|
commitdiff
|
tree
2006-12-03
Paul Moore
NetLabel: change
netlbl_s
e
catt
r
_init() to return void
Signed-off-by:
Paul Moore
<paul.moore@hp.com>
commit
|
commitdiff
|
tree
2006-12-03
Paul Moor
e
N
e
t
L
abel: convert
the unla
b
eled accept
f
lag to use R
C
U
Signed-off-by:
Paul Moore
<paul.moore@hp.com>
commit
|
commitdiff
|
tree
2006-12-03
P
aul Moore
NetLabel: u
s
e
gfp_t instead of int wh
e
r
e
it ma
k
es
sense
Signed-off-by:
Paul Moore
<paul.moore@hp.com>
commit
|
commitdiff
|
tree
2006-11-06
Paul M
o
ore
[NETLABEL]
:
Fix
b
uild failure
.
Signed-off-by:
Paul Moore
<paul.moore@hp.com>
commit
|
commitdiff
|
tree
2006-10-30
Paul Moore
[NetLabel]
:
pro
t
e
c
t
the CIPSOv4
s
ocket option from
.
.
.
Signed-off-by:
Paul Moore
<paul.moore@hp.com>
commit
|
commitdiff
|
tree
2006-10-16
Paul Mo
o
r
e
NetLabel:
t
he C
I
PSOv4 pass
t
hrough mapping does not
.
.
.
Signed-off-by:
Paul Moore
<paul.moore@hp.com>
commit
|
commitdiff
|
tree
2006-10-16
Pa
u
l
M
oore
NetLa
b
el: bette
r
error h
a
n
dling in
v
olving mls_export_cat()
Signed-off-by:
Paul Moore
<paul.moore@hp.com>
commit
|
commitdiff
|
tree
2006-10-16
Paul
Moore
NetLabel: only deref t
h
e
C
IPS
O
v4 standard
m
ap
fields
.
.
.
Signed-off-by:
Paul Moore
<paul.moore@hp.com>
commit
|
commitdiff
|
tree
2006-09-30
Paul Moore
[NetLabel]
:
audit fix
u
ps due to d
e
layed feedback
Signed-off-by:
Paul Moore
<paul.moore@hp.com>
commit
|
commitdiff
|
tree
2006-09-29
Paul Moore
[Net
L
abel]:
a
d
d audit
suppo
r
t
for con
f
igura
t
ion changes
Signed-off-by:
Paul Moore
<paul.moore@hp.com>
commit
|
commitdiff
|
tree
2006-09-25
P
aul
M
oore
[Ne
t
Label]: update
docs with
w
ebsite inform
a
t
ion
Signed-off-by:
Paul Moore
<paul.moore@hp.com>
commit
|
commitdiff
|
tree
2006-09-25
Pau
l
M
o
ore
[NetLabel]
:
rew
o
rk the Netlink
attribu
t
e handling
.
.
.
Signed-off-by:
Paul Moore
<paul.moore@hp.com>
commit
|
commitdiff
|
tree
2006-09-25
Paul
M
o
o
re
[N
e
tLabel]: rew
o
rk the
Netlink attribute han
d
ling
.
.
.
Signed-off-by:
Paul Moore
<paul.moore@hp.com>
commit
|
commitdiff
|
tree
2006-09-25
Paul Moore
[Netl
i
n
k
]: add nla_validate
_
nested()
Signed-off-by:
Paul Moore
<paul.moore@hp.com>
commit
|
commitdiff
|
tree
2006-09-25
Paul Moore
[NETL
I
NK]: add nl
a
_
f
or_each_nes
t
e
d() to the int
e
rface
.
.
.
Signed-off-by:
Paul Moore
<paul.moore@hp.com>
commit
|
commitdiff
|
tree
2006-09-25
Pa
u
l Moore
[NetLabel
]
: change th
e
S
ELin
u
x permissio
n
s
Signed-of-by:
Paul Moore
<paul.moore@hp.com>
commit
|
commitdiff
|
tree
2006-09-25
Paul Moore
[Ne
t
Label]: m
a
k
e
t
he CIPSOv4 c
a
che spinlo
c
ks bottom
.
.
.
Signed-off-by:
Paul Moore
<paul.moore@hp.com>
commit
|
commitdiff
|
tree
2006-09-25
Paul
M
oore
[Ne
t
Label]: cor
r
e
c
t
im
p
roper
han
d
li
n
g
of no
n
-NetLabel
.
.
.
Signed-off-by:
Paul Moore
<paul.moore@hp.com>
commit
|
commitdiff
|
tree
2006-09-22
Paul M
o
ore
[NetLa
b
el
]
:
add some missing #i
n
cludes to var
i
ous header
.
.
.
Signed-off-by:
Paul Moore
<paul.moore@hp.com>
commit
|
commitdiff
|
tree
2006-09-22
P
a
ul Moor
e
[
N
etL
a
bel]
:
u
ninline s
e
linux_netlbl_inode_p
e
rmissio
n
()
Signed-off-by:
Paul Moore
<paul.moore@hp.com>
commit
|
commitdiff
|
tree
2006-09-22
Paul Mo
o
r
e
[
N
e
t
Lab
e
l]: Cle
a
nup ebitm
a
p_import()
Signed-off-by:
Paul Moore
<paul.moore@hp.com>
commit
|
commitdiff
|
tree
2006-09-22
Pau
l
Moore
[N
e
tLab
e
l]: C
o
mment
corr
e
ctions
.
Signed-off-by:
Paul Moore
<paul.moore@hp.com>
commit
|
commitdiff
|
tree
2006-09-22
P
a
u
l
M
oor
e
[Net
L
abel]:
re
m
ove unused functio
n
p
r
oto
t
yp
e
s
Signed-off-by:
Paul Moore
<paul.moore@hp.com>
commit
|
commitdiff
|
tree
2006-09-22
Paul Moore
[NetLabel]
:
Corre
c
tly initialize the NetLabel fields
.
Signed-off-by:
Paul Moore
<paul.moore@hp.com>
commit
|
commitdiff
|
tree
2006-09-22
Paul Moore
[NetLabel]:
t
ie Ne
t
Label into the
Kconfig
s
y
s
tem
Signed-off-by:
Paul Moore
<paul.moore@hp.com>
commit
|
commitdiff
|
tree
2006-09-22
Paul
Moo
r
e
[Ne
t
Label]:
C
IPSOv4 and Unlabe
l
ed packet
i
nt
e
g
ra
t
ion
Signed-off-by:
Paul Moore
<paul.moore@hp.com>
commit
|
commitdiff
|
tree
2006-09-22
Pau
l
Moore
[N
e
tLabe
l
]
:
c
ore N
e
tLabe
l
subs
y
stem
Signed-off-by:
Paul Moore
<paul.moore@hp.com>
commit
|
commitdiff
|
tree
2006-09-22
Pau
l
Moore
[NetL
a
bel]: CIP
S
Ov4 engine
Signed-off-by:
Paul Moore
<paul.moore@hp.com>
commit
|
commitdiff
|
tree
2006-09-22
P
aul M
o
ore
[Ne
t
Label
]
:
c
o
r
e
network changes
Signed-off-by:
Paul Moore
<paul.moore@hp.com>
commit
|
commitdiff
|
tree
2006-09-22
Paul Moore
[NetLabel]: documentation
Signed-off-by:
Paul Moore
<paul.moore@hp.com>
commit
|
commitdiff
|
tree