linux

iv/linux

History

David Quigley eb9ae68650 SELinux: Add new labeling type native labels

There currently doesn't exist a labeling type that is adequate for use with
labeled NFS. Since NFS doesn't really support xattrs we can't use the use xattr
labeling behavior. For this we developed a new labeling type. The native
labeling type is used solely by NFS to ensure NFS inodes are labeled at runtime
by the NFS code instead of relying on the SELinux security server on the client
end.

Acked-by: Eric Paris <eparis@redhat.com>
Acked-by: James Morris <james.l.morris@oracle.com>
Signed-off-by: Matthew N. Dodd <Matthew.Dodd@sparta.com>
Signed-off-by: Miguel Rodel Felipe <Rodel_FM@dsi.a-star.edu.sg>
Signed-off-by: Phua Eu Gene <PHUA_Eu_Gene@dsi.a-star.edu.sg>
Signed-off-by: Khin Mi Mi Aung <Mi_Mi_AUNG@dsi.a-star.edu.sg>
Signed-off-by: Trond Myklebust <Trond.Myklebust@netapp.com>

2013-06-08 16:20:12 -04:00

avtab.c

SELinux: allow userspace to read policy back out of the kernel

2010-10-21 10:12:58 +11:00

avtab.h

SELinux: Use dentry name in new object labeling

2011-02-01 11:12:30 -05:00

conditional.c

selinux: Casting (void *) value returned by kmalloc is useless

2011-12-19 11:23:56 +11:00

conditional.h

selinux: sparse fix: fix several warnings in the security server code