calipso: Set the calipso socket label to match the secattr.
CALIPSO is a hop-by-hop IPv6 option. A lot of this patch is based on the equivalent CISPO code. The main difference is due to manipulating the options in the hop-by-hop header. Signed-off-by:Huw Davies <huw@codeweavers.com> Signed-off-by:
Paul Moore <paul@paul-moore.com>
Showing
- include/net/ipv6.h 2 additions, 0 deletionsinclude/net/ipv6.h
- include/net/netlabel.h 9 additions, 0 deletionsinclude/net/netlabel.h
- include/uapi/linux/in6.h 1 addition, 0 deletionsinclude/uapi/linux/in6.h
- net/ipv6/calipso.c 595 additions, 0 deletionsnet/ipv6/calipso.c
- net/ipv6/ipv6_sockglue.c 0 additions, 1 deletionnet/ipv6/ipv6_sockglue.c
- net/netlabel/Kconfig 1 addition, 0 deletionsnet/netlabel/Kconfig
- net/netlabel/netlabel_calipso.c 64 additions, 0 deletionsnet/netlabel/netlabel_calipso.c
- net/netlabel/netlabel_calipso.h 5 additions, 0 deletionsnet/netlabel/netlabel_calipso.h
- net/netlabel/netlabel_kapi.c 50 additions, 8 deletionsnet/netlabel/netlabel_kapi.c
- security/selinux/netlabel.c 1 addition, 1 deletionsecurity/selinux/netlabel.c
Loading
Please register or sign in to comment