Fix for IPsec leakage with SELinux enabled - V.04

This is a bug fix for the MLSXFRM patchset already queued for 2.6.19.

This version is just a repost of V.03 with the subject titles fixed up, and the patches ported to davem's net-2.6.git as of today.

 include/linux/security.h        |   24 ++-----
 include/net/flow.h              |    2 
 include/net/xfrm.h              |    3 
 net/core/flow.c                 |   42 ++++++++----
 net/ipv4/xfrm4_policy.c         |    2 
 net/ipv6/xfrm6_policy.c         |    2 
 net/key/af_key.c                |    5 -
 net/xfrm/xfrm_policy.c          |  101 ++++++++++++++++++++++--------
 net/xfrm/xfrm_user.c            |    9 --
 security/dummy.c                |    3 
 security/selinux/include/xfrm.h |    3 
 security/selinux/xfrm.c         |   53 ++++++++++++---
 12 files changed, 162 insertions(+), 87 deletions(-)

These are already queued here:

http://git.infradead.org/?p=users/jmorris/selinux-2.6.git;a=summary

- James

James Morris
<[email protected]>