Skip to contentSkip to conversation

MLSXFRM-v02: Repost patchset with updates

PATCH In review Venkat Yekkirala 1 participant 1 message Jul 18, 2006

Subsystems (3)
lore
Share & tools
lore
#0 lore raw

cover MLSXFRM-v02: Repost patchset with updates

The following are the changes included in this patch set (relative to 2.6.18-rc1-mm2) as compared to the previous posting:

- Correct use of BUG_ON (per James' and Stephen's comments)
- security_sid_mls_copy: check context with policydb_context_isvalid (Stephen)
- sk_getsecid: do away with extracting isec (Stephen)
- Do away with extracting isec in rcv_skb and postroute_last hooks (Stephen)
- Drop useless printk invocations (Stephen)
- Better description of the xfrm_decode_session hook in security.h
- Nicer function naming; security_sk_classify_flow, security_skb_classify_flow (David)
NOTE: Also added a new LSM hook req_classify_flow (reluctantly since I wasn't able to just copy the secid from the request_sock to the flow in include/linux/security.h itself due to "incomplete datatype" compilation errors related to the inaccessibility of the request_sock definition in security.h in a clean way; would welcome suggestions in this regard).

--
This message was distributed to subscribers of the selinux mailing list. If you no longer wish to subscribe, send mail to [email protected] with the words "unsubscribe selinux" without quotes as the message.