Paul Moore 16efd45435 NetLabel: Add secid token support to the NetLabel secattr struct ...

This patch adds support to the NetLabel LSM secattr struct for a secid token
and a type field, paving the way for full LSM/SELinux context support and
"static" or "fallback" labels.  In addition, this patch adds a fair amount
of documentation to the core NetLabel structures used as part of the
NetLabel kernel API.

Signed-off-by: Paul Moore <paul.moore@hp.com>
Signed-off-by: James Morris <jmorris@namei.org>

2008-01-30 08:17:19 +11:00

..

ipvs

[NETNS]: Add namespace parameter to ip_route_output_key.

2008-01-28 15:11:07 -08:00

netfilter

[NETNS]: Add namespace parameter to ip_route_output_key.

2008-01-28 15:11:07 -08:00

af_inet.c

[NETNS]: Add namespace parameter to ip_route_output_flow.

2008-01-28 15:11:06 -08:00

ah4.c

[IPSEC]: Move all calls to xfrm_audit_state_icvfail to xfrm_input

2008-01-28 15:00:10 -08:00

arp.c

[NETNS]: Add namespace parameter to ip_route_output_key.

2008-01-28 15:11:07 -08:00

cipso_ipv4.c

NetLabel: Add secid token support to the NetLabel secattr struct

2008-01-30 08:17:19 +11:00

datagram.c

[IPV4] net/ipv4: Use ipv4_is_<type>

2008-01-28 14:58:15 -08:00

devinet.c

[NETNS]: Add netns parameter to inetdev_by_index.

2008-01-28 15:10:20 -08:00

esp4.c

[IPSEC]: Move all calls to xfrm_audit_state_icvfail to xfrm_input

2008-01-28 15:00:10 -08:00

fib_frontend.c

[NETNS]: Add namespace parameter to ip_dev_find.

2008-01-28 15:11:04 -08:00

fib_hash.c

[IPV4] FIB_HASH: Reduce memory needs and speedup lookups

2008-01-28 15:02:46 -08:00

fib_lookup.h

[IPV4] FIB_HASH: Reduce memory needs and speedup lookups

2008-01-28 15:02:46 -08:00

fib_rules.c

[IPV4]: Consolidate fib_select_default.

2008-01-28 15:11:02 -08:00

fib_semantics.c

[NETNS]: Pass correct namespace in context fib_check_nh.

2008-01-28 15:10:21 -08:00

fib_trie.c

[IPV4] fib_trie: remove unneeded NULL check

2008-01-28 15:11:26 -08:00

icmp.c

[NETNS]: Add namespace for ICMP replying code.

2008-01-28 15:11:13 -08:00

igmp.c

[NETNS]: Add namespace parameter to ip_route_output_key.

2008-01-28 15:11:07 -08:00

inet_connection_sock.c

[NETNS]: Add namespace parameter to ip_route_output_flow.

2008-01-28 15:11:06 -08:00

inet_diag.c

[NETNS]: Consolidate kernel netlink socket destruction.

2008-01-28 15:08:07 -08:00

inet_fragment.c

[NETNS][FRAGS]: Make the pernet subsystem for fragments.

2008-01-28 15:10:40 -08:00

inet_hashtables.c

[NET]: prot_inuse cleanups and optimizations

2008-01-28 15:00:36 -08:00

inet_lro.c

[LRO] Fix lro_mgr->features checks

2008-01-08 23:30:18 -08:00

inet_timewait_sock.c

[NET]: prot_inuse cleanups and optimizations

2008-01-28 15:00:36 -08:00

inetpeer.c

[INET]: Use list_head-s in inetpeer.c

2007-11-12 21:27:28 -08:00

ip_forward.c

[NETFILTER]: Introduce NF_INET_ hook values

2008-01-28 14:53:55 -08:00

ip_fragment.c

[NETNS][FRAGS]: Make the pernet subsystem for fragments.

2008-01-28 15:10:40 -08:00

ip_gre.c

[NETNS]: Add namespace parameter to ip_route_output_key.

2008-01-28 15:11:07 -08:00

ip_input.c

[IPv4] RAW: Compact the API for the kernel

2008-01-28 14:54:28 -08:00

ip_options.c

[NETNS]: Add netns parameter to inet_(dev_)add_type.

2008-01-28 15:01:27 -08:00

ip_output.c

[NETNS]: Add namespace for ICMP replying code.

2008-01-28 15:11:13 -08:00

ip_sockglue.c

[NETNS]: Add namespace parameter to ip_dev_find.

2008-01-28 15:11:04 -08:00

ipcomp.c

[IPSEC]: Forbid BEET + ipcomp for now

2008-01-28 14:53:43 -08:00

ipconfig.c

[NETNS]: Pass namespace through ip_rt_ioctl.

2008-01-28 15:01:34 -08:00

ipip.c

[NETNS]: Add namespace parameter to ip_route_output_key.

2008-01-28 15:11:07 -08:00

ipmr.c

[NETNS]: Add namespace parameter to ip_route_output_key.

2008-01-28 15:11:07 -08:00

Kconfig

[IPV4] fib_trie: Add statistics.

2008-01-28 15:01:56 -08:00

Makefile

[IPV4]: Cleanup the sysctl_net_ipv4.c file

2008-01-28 14:56:27 -08:00

netfilter.c

[NETNS]: Add namespace parameter to ip_route_output_key.

2008-01-28 15:11:07 -08:00

proc.c

[NETNS][FRAGS]: Make the mem counter per-namespace.

2008-01-28 15:10:36 -08:00

protocol.c

[IPV4]: align inet_protos[] on SMP

2007-04-25 22:28:20 -07:00

raw.c

[NETNS]: Add namespace parameter to ip_route_output_flow.

2008-01-28 15:11:06 -08:00

route.c

[NETNS]: Routing cache virtualization.

2008-01-28 15:11:13 -08:00

syncookies.c

[NETNS]: Add namespace parameter to ip_route_output_key.

2008-01-28 15:11:07 -08:00

sysctl_net_ipv4.c

[NETNS][FRAGS]: Move ctl tables around.

2008-01-28 15:10:34 -08:00

tcp_bic.c

[TCP]: Cong.ctrl modules: remove unused good_ack from cong_avoid

2008-01-28 14:55:41 -08:00

tcp_cong.c

[TCP]: Uninline tcp_is_cwnd_limited

2008-01-28 15:01:48 -08:00

tcp_cubic.c

[TCP]: Cong.ctrl modules: remove unused good_ack from cong_avoid

2008-01-28 14:55:41 -08:00

tcp_diag.c

[INET]: Let inet_diag and friends autoload

2007-10-22 02:59:54 -07:00

tcp_highspeed.c

[TCP]: Cong.ctrl modules: remove unused good_ack from cong_avoid

2008-01-28 14:55:41 -08:00

tcp_htcp.c

[TCP]: Cong.ctrl modules: remove unused good_ack from cong_avoid

2008-01-28 14:55:41 -08:00

tcp_hybla.c

[TCP]: Cong.ctrl modules: remove unused good_ack from cong_avoid

2008-01-28 14:55:41 -08:00

tcp_illinois.c

[TCP]: Cong.ctrl modules: remove unused good_ack from cong_avoid

2008-01-28 14:55:41 -08:00

tcp_input.c

[TCP]: cleanup tcp_parse_options deep indented switch

2008-01-28 15:00:33 -08:00

tcp_ipv4.c

[TCP]: Convert several length variable to unsigned.

2008-01-28 14:59:56 -08:00

tcp_lp.c

[TCP]: Cong.ctrl modules: remove unused good_ack from cong_avoid

2008-01-28 14:55:41 -08:00

tcp_minisocks.c

[TCP]: Move sack_ok access to obviously named funcs & cleanup

2007-10-10 16:48:00 -07:00

tcp_output.c

[TCP]: Perform setting of common control fields in one place

2008-01-28 15:00:34 -08:00

tcp_probe.c

[NET]: Make /proc/net per network namespace

2007-10-10 16:49:06 -07:00

tcp_scalable.c

[TCP]: Cong.ctrl modules: remove unused good_ack from cong_avoid

2008-01-28 14:55:41 -08:00

tcp_timer.c

[TCP]: Do not purge sk_forward_alloc entirely in tcp_delack_timer().

2008-01-28 15:01:42 -08:00

tcp_vegas.c

[TCP]: Cong.ctrl modules: remove unused good_ack from cong_avoid

2008-01-28 14:55:41 -08:00

tcp_vegas.h

[TCP]: congestion control API pass RTT in microseconds

2007-07-31 02:27:57 -07:00

tcp_veno.c

[TCP]: Cong.ctrl modules: remove unused good_ack from cong_avoid

2008-01-28 14:55:41 -08:00

tcp_westwood.c

[TCP]: congestion control API pass RTT in microseconds

2007-07-31 02:27:57 -07:00

tcp_yeah.c

[TCP]: Cong.ctrl modules: remove unused good_ack from cong_avoid

2008-01-28 14:55:41 -08:00

tcp.c

[TCP]: Uninline tcp_set_state

2008-01-28 15:01:47 -08:00

tunnel4.c

[INET]: Cleanup the xfrm4_tunnel_(un)register

2007-11-10 21:48:54 -08:00

udp_impl.h

[UDP]: Randomize port selection.

2007-10-10 16:48:31 -07:00

udp.c

[NETNS]: Add namespace parameter to ip_route_output_flow.

2008-01-28 15:11:06 -08:00

udplite.c

[IPV4] UDP,UDPLITE: Sparse: {__udp4_lib,udp,udplite}_err() are of void.

2008-01-28 15:10:24 -08:00

xfrm4_input.c

[IPSEC]: Fix transport-mode async resume on intput without netfilter

2008-01-28 15:00:10 -08:00

xfrm4_mode_beet.c

[IPSEC]: Separate inner/outer mode processing on input

2008-01-28 14:53:46 -08:00

xfrm4_mode_transport.c

[IPSEC]: Use IPv6 calling convention as the convention for x->mode->output

2007-10-10 16:55:54 -07:00

xfrm4_mode_tunnel.c

[IPSEC]: Rename tunnel-mode functions to avoid collisions with tunnels

2008-01-28 14:59:18 -08:00

xfrm4_output.c

[NETFILTER]: Introduce NF_INET_ hook values

2008-01-28 14:53:55 -08:00

xfrm4_policy.c

[NETNS]: Add namespace parameter to __ip_route_output_key.

2008-01-28 15:11:05 -08:00

xfrm4_state.c

[IPSEC]: Kill afinfo->nf_post_routing

2008-01-28 14:53:55 -08:00

xfrm4_tunnel.c

[IPSEC]: Move tunnel parsing for IPv4 out of xfrm4_input

2007-10-17 21:28:53 -07:00