MLSXFRM-v02: Repost patchset with updates
Get series with b4
b4 am [email protected]Versions newest first
- v1 Latest10 patches 4 repliesIn review
Patches in v1 No applies recorded yet
| # | Subject and files | Size | Replies | Applied |
|---|---|---|---|---|
| 1/10 | MLSXFRM-v02: Granular IPSec associations for use in MLS environmentssecurity/ security/ | +1 | 0 replies | |
| 2/10 | MLSXFRM-v02: Define new SELinux service routinesecurity/ security/ security/ +1 more | +0 | 0 replies | |
| 3/10 | MLSXFRM-v02: Add security sid to sockinclude/ include/ net/ +3 more | +2 | 0 replies | |
| 4/10 | MLSXFRM-v02: Add security sid to flowiDocumentation/ include/ | +14 | 0 replies | |
| 5/10 | MLSXFRM-v02: Flow based matching of xfrm policy and stateinclude/ include/ net/ +6 more | +6 | 0 replies | |
| 6/10 | MLSXFRM-v02: Add security context to acquire messages using netlinknet/ | +0 | 0 replies | |
| 7/10 | MLSXFRM: Add security context to acquire messages using PF_KEYnet/ | +0 | 0 replies | |
| 8/10 | MLSXFRM-v02: Add flow labelinginclude/ include/ net/ +23 more | +1 | 0 replies | |
| 9/10 | MLSXFRM-v02: Default labeling of socket specific IPSec policiesinclude/ include/ net/ +5 more | +3 | 0 replies | |
| 10/10 | MLSXFRM-v02: Auto-labeling of child socketsinclude/ include/ include/ +9 more | +0 | 4 replies |
Reviews trailers per patch
1 of 10 patches has a Reviewed-by or Acked-by.
| Patch | James Morris |
|---|---|
| 1/10 | |
| 2/10 | |
| 3/10 | |
| 4/10 | |
| 5/10 | |
| 6/10 | |
| 7/10 | |
| 8/10 | |
| 9/10 | |
| 10/10 | A-b |
Trailers given in replies are filled; those carried in the patches from earlier versions are outlined with dashes.
Cover letter [PATCH 00/10] MLSXFRM-v02: Repost patchset with updates
The following are the changes included in this patch set (relative to 2.6.18-rc1-mm2) as compared to the previous posting:
- Correct use of BUG_ON (per James' and Stephen's comments)
- security_sid_mls_copy: check context with policydb_context_isvalid (Stephen)
- sk_getsecid: do away with extracting isec (Stephen)
- Do away with extracting isec in rcv_skb and postroute_last hooks (Stephen)
- Drop useless printk invocations (Stephen)
- Better description of the xfrm_decode_session hook in security.h
- Nicer function naming; security_sk_classify_flow, security_skb_classify_flow (David)
NOTE: Also added a new LSM hook req_classify_flow (reluctantly since I wasn't able to just copy the secid from the request_sock to the flow in include/linux/security.h itself due to "incomplete datatype" compilation errors related to the inaccessibility of the request_sock definition in security.h in a clean way; would welcome suggestions in this regard).
--
This message was distributed to subscribers of the selinux mailing list. If you no longer wish to subscribe, send mail to [email protected] with the words "unsubscribe selinux" without quotes as the message.