linux.git/net/netlabel, branch v2.6.23

[NetLabel]: add missing rcu_dereference() calls in the LSM domain mapping hash table

2007-08-08T00:53:10+00:00

The LSM domain mapping head table pointer was not being referenced via the RCU
safe dereferencing function, rcu_dereference().  This patch adds those missing
calls to the NetLabel code.

This has been tested using recent linux-2.6 git kernels with no visible
regressions.

Signed-off-by: Paul Moore 
Signed-off-by: David S. Miller

Net/Security: fix memory leaks from security_secid_to_secctx()

2007-08-02T15:52:26+00:00

The security_secid_to_secctx() function returns memory that must be freed
by a call to security_release_secctx() which was not always happening.  This
patch fixes two of these problems (all that I could find in the kernel source
at present).

Signed-off-by: Paul Moore 
Acked-by:  Stephen Smalley 
Signed-off-by: James Morris

SELinux: enable dynamic activation/deactivation of NetLabel/SELinux enforcement

2007-07-19T14:21:11+00:00

Create a new NetLabel KAPI interface, netlbl_enabled(), which reports on the
current runtime status of NetLabel based on the existing configuration.  LSMs
that make use of NetLabel, i.e. SELinux, can use this new function to determine
if they should perform NetLabel access checks.  This patch changes the
NetLabel/SELinux glue code such that SELinux only enforces NetLabel related
access checks when netlbl_enabled() returns true.

At present NetLabel is considered to be enabled when there is at least one
labeled protocol configuration present.  The result is that by default NetLabel
is considered to be disabled, however, as soon as an administrator configured
a CIPSO DOI definition NetLabel is enabled and SELinux starts enforcing
NetLabel related access controls - including unlabeled packet controls.

This patch also tries to consolidate the multiple "#ifdef CONFIG_NETLABEL"
blocks into a single block to ease future review as recommended by Linus.

Signed-off-by: Paul Moore 
Signed-off-by: James Morris

Audit: add TTY input auditing

2007-07-16T16:05:47+00:00

Add TTY input auditing, used to audit system administrator's actions.  This is
required by various security standards such as DCID 6/3 and PCI to provide
non-repudiation of administrator's actions and to allow a review of past
actions if the administrator seems to overstep their duties or if the system
becomes misconfigured for unknown reasons.  These requirements do not make it
necessary to audit TTY output as well.

Compared to an user-space keylogger, this approach records TTY input using the
audit subsystem, correlated with other audit events, and it is completely
transparent to the user-space application (e.g.  the console ioctls still
work).

TTY input auditing works on a higher level than auditing all system calls
within the session, which would produce an overwhelming amount of mostly
useless audit events.

Add an "audit_tty" attribute, inherited across fork ().  Data read from TTYs
by process with the attribute is sent to the audit subsystem by the kernel.
The audit netlink interface is extended to allow modifying the audit_tty
attribute, and to allow sending explanatory audit events from user-space (for
example, a shell might send an event containing the final command, after the
interactive command-line editing and history expansion is performed, which
might be difficult to decipher from the TTY input alone).

Because the "audit_tty" attribute is inherited across fork (), it would be set
e.g.  for sshd restarted within an audited session.  To prevent this, the
audit_tty attribute is cleared when a process with no open TTY file
descriptors (e.g.  after daemon startup) opens a TTY.

See https://www.redhat.com/archives/linux-audit/2007-June/msg00000.html for a
more detailed rationale document for an older version of this patch.

[akpm@linux-foundation.org: build fix]
Signed-off-by: Miloslav Trmac 
Cc: Al Viro 
Cc: Alan Cox 
Cc: Paul Fulghum 
Cc: Casey Schaufler 
Cc: Steve Grubb 
Signed-off-by: Andrew Morton 
Signed-off-by: Linus Torvalds

[NetLabel]: consolidate the struct socket/sock handling to just struct sock

2007-06-08T20:33:09+00:00

The current NetLabel code has some redundant APIs which allow both
"struct socket" and "struct sock" types to be used; this may have made
sense at some point but it is wasteful now.  Remove the functions that
operate on sockets and convert the callers.  Not only does this make
the code smaller and more consistent but it pushes the locking burden
up to the caller which can be more intelligent about the locks.  Also,
perform the same conversion (socket to sock) on the SELinux/NetLabel
glue code where it make sense.

Signed-off-by: Paul Moore 
Acked-by: James Morris 
Signed-off-by: David S. Miller

[NETLINK]: Mark netlink policies const

2007-06-07T20:40:10+00:00

Signed-off-by: Patrick McHardy 
Signed-off-by: David S. Miller

SELinux: extract the NetLabel SELinux support from the security server

2007-04-26T05:35:48+00:00

Up until this patch the functions which have provided NetLabel support to
SELinux have been integrated into the SELinux security server, which for
various reasons is not really ideal.  This patch makes an effort to extract as
much of the NetLabel support from the security server as possibile and move it
into it's own file within the SELinux directory structure.

Signed-off-by: Paul Moore 
Signed-off-by: James Morris

[NET]: Fix kfree(skb)

2007-02-28T17:42:14+00:00

Signed-off-by: Patrick McHardy 
Acked-by: Paul Moore 
Signed-off-by: David S. Miller

[NET] NETLABEL: Fix whitespace errors.

2007-02-11T07:19:56+00:00

Signed-off-by: YOSHIFUJI Hideaki 
Signed-off-by: David S. Miller

NetLabel: correct CIPSO tag handling when adding new DOI definitions

2007-01-09T08:30:01+00:00

The current netlbl_cipsov4_add_common() function has two problems which are
fixed with this patch.  The first is an off-by-one bug where it is possibile to
overflow the doi_def->tags[] array.  The second is a bug where the same
doi_def->tags[] array was not always fully initialized, which caused sporadic
failures.

Signed-off-by: Paul Moore 
Signed-off-by: James Morris