linux.git/net/netlabel, branch v2.6.19

[NETLABEL]: Fix build failure.

2006-11-06T00:44:06+00:00

> the build with the attached .config failed, make ends with:
> ...
> : undefined reference to `cipso_v4_sock_getattr'
> net/built-in.o: In function `netlbl_socket_getattr':

 ...

It looks like I was stupid and made NetLabel depend on CONFIG_NET and not
CONFIG_INET, the patch below should fix this by making NetLabel depend on
CONFIG_INET and CONFIG_SECURITY.  Please review and apply for 2.6.19.

Signed-off-by: Paul Moore 
Signed-off-by: David S. Miller

NetLabel: fix a cache race condition

2006-10-12T06:59:29+00:00

Testing revealed a problem with the NetLabel cache where a cached entry could
be freed while in use by the LSM layer causing an oops and other problems.
This patch fixes that problem by introducing a reference counter to the cache
entry so that it is only freed when it is no longer in use.

Signed-off-by: Paul Moore 
Signed-off-by: James Morris

[NetLabel]: audit fixups due to delayed feedback

2006-09-30T00:05:05+00:00

Fix some issues Steve Grubb had with the way NetLabel was using the audit
subsystem.  This should make NetLabel more consistent with other kernel
generated audit messages specifying configuration changes.

Signed-off-by: Paul Moore 
Acked-by: Steve Grubb 
Signed-off-by: David S. Miller

[NetLabel]: add audit support for configuration changes

2006-09-29T01:03:09+00:00

This patch adds audit support to NetLabel, including six new audit message
types shown below.

 #define AUDIT_MAC_UNLBL_ACCEPT 1406
 #define AUDIT_MAC_UNLBL_DENY   1407
 #define AUDIT_MAC_CIPSOV4_ADD  1408
 #define AUDIT_MAC_CIPSOV4_DEL  1409
 #define AUDIT_MAC_MAP_ADD      1410
 #define AUDIT_MAC_MAP_DEL      1411

Signed-off-by: Paul Moore 
Acked-by: James Morris 
Signed-off-by: David S. Miller

[NetLabel]: update docs with website information

2006-09-25T22:57:13+00:00

Now that all of the supporting pieces of NetLabel have a home at SourceForge
update the Kconfig help text and add an entry to the MAINTAINERS file.

Signed-off-by: Paul Moore 
Signed-off-by: David S. Miller

[NetLabel]: rework the Netlink attribute handling (part 2)

2006-09-25T22:56:37+00:00

At the suggestion of Thomas Graf, rewrite NetLabel's use of Netlink attributes
to better follow the common Netlink attribute usage.

Signed-off-by: Paul Moore 
Signed-off-by: David S. Miller

[NetLabel]: rework the Netlink attribute handling (part 1)

2006-09-25T22:56:09+00:00

At the suggestion of Thomas Graf, rewrite NetLabel's use of Netlink attributes
to better follow the common Netlink attribute usage.

Signed-off-by: Paul Moore 
Signed-off-by: David S. Miller

[NetLabel]: correct improper handling of non-NetLabel peer contexts

2006-09-25T22:52:01+00:00

Fix a problem where NetLabel would always set the value of 
sk_security_struct->peer_sid in selinux_netlbl_sock_graft() to the context of
the socket, causing problems when users would query the context of the
connection.  This patch fixes this so that the value in
sk_security_struct->peer_sid is only set when the connection is NetLabel based,
otherwise the value is untouched.

Signed-off-by: Paul Moore 
Signed-off-by: David S. Miller

[NetLabel]: add some missing #includes to various header files

2006-09-22T22:18:39+00:00

Add some missing include files to the NetLabel related header files.

Signed-off-by: Paul Moore 
Signed-off-by: David S. Miller

[NETLINK]: Add notification message sending interface

2006-09-22T21:54:49+00:00

Adds nlmsg_notify() implementing proper notification logic. The
message is multicasted to all listeners in the group. The
applications the requests orignates from can request a unicast
back report in which case said socket will be excluded from the
multicast to avoid duplicated notifications.

nlmsg_multicast() is extended to take allocation flags to
allow notification in atomic contexts.

Signed-off-by: Thomas Graf 
Signed-off-by: David S. Miller