]> pilppa.com Git - linux-2.6-omap-h63xx.git/commit
SELinux: peer secid consolidation for external network labeling
authorPaul Moore <paul.moore@hp.com>
Fri, 17 Nov 2006 22:38:54 +0000 (17:38 -0500)
committerDavid S. Miller <davem@sunset.davemloft.net>
Sun, 3 Dec 2006 05:24:14 +0000 (21:24 -0800)
commit3de4bab5b9f8848a0c16a4b1ffe0452f0d670237
treef65c12b53bf2ad02645ea31522f67e7318019498
parent9f2ad66509b182b399a5b03de487f45bde623524
SELinux: peer secid consolidation for external network labeling

Now that labeled IPsec makes use of the peer_sid field in the
sk_security_struct we can remove a lot of the special cases between labeled
IPsec and NetLabel.  In addition, create a new function,
security_skb_extlbl_sid(), which we can use in several places to get the
security context of the packet's external label which allows us to further
simplify the code in a few places.

Signed-off-by: Paul Moore <paul.moore@hp.com>
Signed-off-by: James Morris <jmorris@namei.org>
security/selinux/hooks.c
security/selinux/include/security.h
security/selinux/include/selinux_netlabel.h
security/selinux/include/xfrm.h
security/selinux/ss/services.c
security/selinux/xfrm.c