REFPOL: Add new object classes and permissions for labeled networking
PATCH 1/1 REFPOL: Add new object classes and permissions for labeled networking
This patch reserves a new object class and permissions needed by the labeled networking changes scheduled for 2.6.25.
Signed-off-by Paul Moore <[email protected]>
--- policy/flask/access_vectors | 10 ++++++++++ policy/flask/security_classes | 3 +++ 2 files changed, 13 insertions(+)
policy/flask/access_vectors +10 -0
@@ -201,6 +201,8 @@ class node enforce_dest dccp_recv dccp_send + recvfrom + sendto } class netif
@@ -213,6 +215,8 @@ class netif rawip_send dccp_recv dccp_send + ingress + egress } class netlink_socket
@@ -726,3 +730,9 @@ inherits database import export } + +# network peer labels +class peer +{ + recv +}
policy/flask/security_classes +3 -0
@@ -106,4 +106,7 @@ class db_column # userspace class db_tuple # userspace class db_blob # userspace +# network peer labels +class peer + # FLASK
Signature · 8 lines
paul moore linux security @ hp -- This message was distributed to subscribers of the selinux mailing list. If you no longer wish to subscribe, send mail to [email protected] with the words "unsubscribe selinux" without quotes as the message.
Quoted 3 lines · Paul Moore
plain text document attachment (selinux-flask_peer_perms)
This patch reserves a new object class and permissions needed by the labeled networking changes scheduled for 2.6.25.
Merged.
Quoted 51 lines
Signed-off-by Paul Moore <[email protected]>--- policy/flask/access_vectors | 10 ++++++++++ policy/flask/security_classes | 3 +++ 2 files changed, 13 insertions(+)Index: refpolicy_svn_repo/policy/flask/access_vectors
===================================================================policy/flask/access_vectors +10
-0@@ -201,6 +201,8 @@ class node enforce_dest dccp_recv dccp_send + recvfrom + sendto } class netif@@ -213,6 +215,8 @@ class netif rawip_send dccp_recv dccp_send + ingress + egress } class netlink_socket@@ -726,3 +730,9 @@ inherits database import export } + +# network peer labels +class peer +{ + recv +}Index: refpolicy_svn_repo/policy/flask/security_classes
===================================================================policy/flask/security_classes +3
-0@@ -106,4 +106,7 @@ class db_column # userspace class db_tuple # userspace class db_blob # userspace +# network peer labels +class peer + # FLASK
Signature · 9 lines
Chris PeBenito Tresys Technology, LLC (410) 290-1411 x150 -- This message was distributed to subscribers of the selinux mailing list. If you no longer wish to subscribe, send mail to [email protected] with the words "unsubscribe selinux" without quotes as the message.