30 Sep, 2006

1 commit

• 95d4e6be2   [NetLabel]: audit fixups due to delayed feedback ... Browse Code »

  Fix some issues Steve Grubb had with the way NetLabel was using the audit
  subsystem. This should make NetLabel more consistent with other kernel
  generated audit messages specifying configuration changes.

  Signed-off-by: Paul Moore
  Acked-by: Steve Grubb
  Signed-off-by: David S. Miller

  Paul Moore

  2006-09-30 08:05:05 +0800  

29 Sep, 2006

1 commit

• 32f50cdee   [NetLabel]: add audit support for configuration changes ... Browse Code »

  This patch adds audit support to NetLabel, including six new audit message
  types shown below.

  #define AUDIT_MAC_UNLBL_ACCEPT 1406
  #define AUDIT_MAC_UNLBL_DENY 1407
  #define AUDIT_MAC_CIPSOV4_ADD 1408
  #define AUDIT_MAC_CIPSOV4_DEL 1409
  #define AUDIT_MAC_MAP_ADD 1410
  #define AUDIT_MAC_MAP_DEL 1411

  Signed-off-by: Paul Moore
  Acked-by: James Morris
  Signed-off-by: David S. Miller

  Paul Moore

  2006-09-29 09:03:09 +0800  

26 Sep, 2006

1 commit

• fcd482806   [NetLabel]: rework the Netlink attribute handling (part 1) ... Browse Code »

  At the suggestion of Thomas Graf, rewrite NetLabel's use of Netlink attributes
  to better follow the common Netlink attribute usage.

  Signed-off-by: Paul Moore
  Signed-off-by: David S. Miller

  Paul Moore

  2006-09-26 06:56:09 +0800  

23 Sep, 2006

2 commits

• d387f6ad1   [NETLINK]: Add notification message sending interface ... Browse Code »

  Adds nlmsg_notify() implementing proper notification logic. The
  message is multicasted to all listeners in the group. The
  applications the requests orignates from can request a unicast
  back report in which case said socket will be excluded from the
  multicast to avoid duplicated notifications.

  nlmsg_multicast() is extended to take allocation flags to
  allow notification in atomic contexts.

  Signed-off-by: Thomas Graf
  Signed-off-by: David S. Miller

  Thomas Graf

  2006-09-23 05:54:49 +0800  
• d15c345fe   [NetLabel]: core NetLabel subsystem ... Browse Code »

  Add a new kernel subsystem, NetLabel, to provide explicit packet
  labeling services (CIPSO, RIPSO, etc.) to LSM developers. NetLabel is
  designed to work in conjunction with a LSM to intercept and decode
  security labels on incoming network packets as well as ensure that
  outgoing network packets are labeled according to the security
  mechanism employed by the LSM. The NetLabel subsystem is configured
  through a Generic NETLINK interface described in the header files
  included in this patch.

  Signed-off-by: Paul Moore
  Signed-off-by: David S. Miller

  Paul Moore

  2006-09-23 05:53:34 +0800