]> pilppa.com Git - linux-2.6-omap-h63xx.git/commit
smack: Add a new '-CIPSO' option to the network address label configuration
authorEtienne Basset <etienne.basset@numericable.fr>
Fri, 27 Mar 2009 21:11:01 +0000 (17:11 -0400)
committerJames Morris <jmorris@namei.org>
Sat, 28 Mar 2009 04:01:37 +0000 (15:01 +1100)
commit4303154e86597885bc3cbc178a48ccbc8213875f
tree11989bcc2ec5d9cd5a1b7952f169ec5cbd8abb8e
parent07feee8f812f7327a46186f7604df312c8c81962
smack: Add a new '-CIPSO' option to the network address label configuration

This patch adds a new special option '-CIPSO' to the Smack subsystem. When used
in the netlabel list, it means "use CIPSO networking". A use case is when your
local network speaks CIPSO and you want also to connect to the unlabeled
Internet. This patch also add some documentation describing that. The patch
also corrects an oops when setting a '' SMACK64 xattr to a file.

Signed-off-by: Etienne Basset <etienne.basset@numericable.fr>
Signed-off-by: Paul Moore <paul.moore@hp.com>
Acked-by: Casey Schaufler <casey@schaufler-ca.com>
Signed-off-by: James Morris <jmorris@namei.org>
Documentation/Smack.txt
security/smack/smack.h
security/smack/smack_access.c
security/smack/smack_lsm.c
security/smack/smackfs.c