01 Aug, 2007

1 commit


26 Apr, 2007

2 commits


11 Feb, 2007

1 commit


31 Oct, 2006

1 commit

  • This patch makes two changes to protect applications from either removing or
    tampering with the CIPSOv4 IP option on a socket. The first is the requirement
    that applications have the CAP_NET_RAW capability to set an IPOPT_CIPSO option
    on a socket; this prevents untrusted applications from setting their own
    CIPSOv4 security attributes on the packets they send. The second change is to
    SELinux and it prevents applications from setting any IPv4 options when there
    is an IPOPT_CIPSO option already present on the socket; this prevents
    applications from removing CIPSOv4 security attributes from the packets they
    send.

    Signed-off-by: Paul Moore
    Signed-off-by: James Morris
    Signed-off-by: David S. Miller

    Paul Moore
     

29 Sep, 2006

5 commits


23 Sep, 2006

2 commits

  • The value is_setbyuser from struct ip_options is never used and set
    only one time (http://linux-net.osdl.org/index.php/TODO#IPV4).
    This little patch removes it from the kernel source.

    Signed-off-by: Louis Nyffenegger
    Signed-off-by: David S. Miller

    Louis Nyffenegger
     
  • Changes to the core network stack to support the NetLabel subsystem. This
    includes changes to the IPv4 option handling to support CIPSO labels.

    Signed-off-by: Paul Moore
    Signed-off-by: David S. Miller

    Paul Moore
     

22 Jul, 2006

1 commit


10 May, 2006

1 commit


12 Jan, 2006

1 commit


04 Jan, 2006

1 commit


09 Nov, 2005

1 commit

  • From: Jesper Juhl

    This is the net/ part of the big kfree cleanup patch.

    Remove pointless checks for NULL prior to calling kfree() in net/.

    Signed-off-by: Jesper Juhl
    Cc: "David S. Miller"
    Cc: Arnaldo Carvalho de Melo
    Acked-by: Marcel Holtmann
    Acked-by: YOSHIFUJI Hideaki
    Signed-off-by: Andrew Morton

    Jesper Juhl
     

30 Aug, 2005

2 commits

  • This variant is needed to satisfy sparse __user annotations.

    Signed-off-by: Arnaldo Carvalho de Melo
    Signed-off-by: David S. Miller

    Arnaldo Carvalho de Melo
     
  • This patch contains the following possible cleanups:
    - make needlessly global code static
    - #if 0 the following unused global function:
    - xfrm4_state.c: xfrm4_state_fini
    - remove the following unneeded EXPORT_SYMBOL's:
    - ip_output.c: ip_finish_output
    - ip_output.c: sysctl_ip_default_ttl
    - fib_frontend.c: ip_dev_find
    - inetpeer.c: inet_peer_idlock
    - ip_options.c: ip_options_compile
    - ip_options.c: ip_options_undo
    - net/core/request_sock.c: sysctl_max_syn_backlog

    Signed-off-by: Adrian Bunk
    Signed-off-by: David S. Miller

    Adrian Bunk
     

17 Apr, 2005

1 commit

  • Initial git repository build. I'm not bothering with the full history,
    even though we have it. We can create a separate "historical" git
    archive of that later if we want to, and in the meantime it's about
    3.2GB when imported into git - space that would just make the early
    git days unnecessarily complicated, when we don't have a lot of good
    infrastructure for it.

    Let it rip!

    Linus Torvalds