Skip to content

Labeled network policy patches

Paul Moore selinux 2 versions – In review

Get series with b4
b4 am [email protected]

Versions newest first · linked by author and title

  1. v2 Latest5 patches 2 repliesIn review
  2. v15 patches 4 repliesSuperseded

Patches in v2 No applies recorded yet

#Subject and filesSizeRepliesApplied
1/5Use the netmsg initial SID for NetLabel connectionspolicy/mls policy/modules/kernel/corenetwork.if.in policy/modules/kernel/corenetwork.te.in +2 more+275 -510 replies
2/5Add NetLabel labeled and unlabeled support to the system domainspolicy/modules/system/hotplug.te policy/modules/system/init.te policy/modules/system/ipsec.te +8 more+25 -190 replies
3/5Add NetLabel labeled and unlabeled support to the service domainspolicy/modules/services/afs.te policy/modules/services/amavis.te policy/modules/services/apache.if +119 more+317 -1710 replies
4/5Add NetLabel labeled and unlabeled support to the application domainspolicy/modules/apps/calamaris.te policy/modules/apps/evolution.if policy/modules/apps/games.if +11 more+36 -180 replies
5/5Add NetLabel labeled and unlabeled support to the administrative domainspolicy/modules/admin/amanda.te policy/modules/admin/apt.te policy/modules/admin/backup.te +8 more+30 -150 replies

Reviews trailers per patch

No Reviewed-by, Acked-by or Tested-by trailers for v2 yet.

Read the v2 thread

Cover letter [PATCHv2 0/5] Labeled network policy patches

The latest revision of the labeled policy patches which enable both labeled and unlabeled policy support for NetLabel. This revision takes into account Chris' feedback from the first version and reduces the number of interface calls in each domain down to two at present: one for unlabeled access, one for NetLabel access. The older, transport layer specific interfaces, are still present for use by third-party modules but are not used in the default policy modules.

If there are still concerns please let me know, thanks.

Signature · 7 lines
paul moore
linux security @ hp

--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to [email protected] with
the words "unsubscribe selinux" without quotes as the message.