linux-sg2042/net/ipv6
Venkat Yekkirala 4237c75c0a [MLSXFRM]: Auto-labeling of child sockets
This automatically labels the TCP, Unix stream, and dccp child sockets
as well as openreqs to be at the same MLS level as the peer. This will
result in the selection of appropriately labeled IPSec Security
Associations.

This also uses the sock's sid (as opposed to the isec sid) in SELinux
enforcement of secmark in rcv_skb and postroute_last hooks.

Signed-off-by: Venkat Yekkirala <vyekkirala@TrustedCS.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
2006-09-22 14:53:29 -07:00
..
netfilter [MLSXFRM]: Add flow labeling 2006-09-22 14:53:27 -07:00
Kconfig [IPSEC] ESP: Use block ciphers where applicable 2006-09-21 11:46:14 +10:00
Makefile [IPSEC] xfrm: Abstract out encapsulation modes 2006-06-17 21:28:39 -07:00
addrconf.c [IPV6]: ipv6_add_addr should install dstentry earlier 2006-08-29 21:22:18 -07:00
af_inet6.c [MLSXFRM]: Add flow labeling 2006-09-22 14:53:27 -07:00
ah6.c [IPSEC]: Use HMAC template and hash interface 2006-09-21 11:46:18 +10:00
anycast.c Remove obsolete #include <linux/config.h> 2006-06-30 19:25:36 +02:00
datagram.c [MLSXFRM]: Add flow labeling 2006-09-22 14:53:27 -07:00
esp6.c [IPSEC]: Use HMAC template and hash interface 2006-09-21 11:46:18 +10:00
exthdrs.c [IPV6]: Fix kernel OOPs when setting sticky socket options. 2006-08-31 14:52:17 -07:00
exthdrs_core.c [SELINUX]: Fix ipv6_skip_exthdr() invocation causing OOPS. 2005-04-24 20:16:19 -07:00
icmp.c [MLSXFRM]: Add flow labeling 2006-09-22 14:53:27 -07:00
inet6_connection_sock.c [MLSXFRM]: Add flow labeling 2006-09-22 14:53:27 -07:00
inet6_hashtables.c Remove obsolete #include <linux/config.h> 2006-06-30 19:25:36 +02:00
ip6_fib.c Remove obsolete #include <linux/config.h> 2006-06-30 19:25:36 +02:00
ip6_flowlabel.c Remove obsolete #include <linux/config.h> 2006-06-30 19:25:36 +02:00
ip6_input.c [IPV6]: Clean skb cb on IPv6 input. 2006-07-24 23:44:44 -07:00
ip6_output.c [INET]: Use pskb_trim_unique when trimming paged unique skbs 2006-08-13 20:12:58 -07:00
ip6_tunnel.c [NET]: Conversions from kmalloc+memset to k(z|c)alloc. 2006-07-21 14:51:30 -07:00
ipcomp6.c [CRYPTO] users: Use crypto_comp and crypto_has_* 2006-09-21 11:46:22 +10:00
ipv6_sockglue.c [IPV6]: Accept -1 for IPV6_TCLASS 2006-09-17 23:21:08 -07:00
ipv6_syms.c Remove obsolete #include <linux/config.h> 2006-06-30 19:25:36 +02:00
mcast.c [MCAST]: Fix filter leak on device removal. 2006-08-17 16:29:57 -07:00
ndisc.c [MLSXFRM]: Add flow labeling 2006-09-22 14:53:27 -07:00
netfilter.c [NETFILTER]: Fix build with CONFIG_NETFILTER=y/m on IA64 2006-04-09 22:25:49 -07:00
proc.c Remove obsolete #include <linux/config.h> 2006-06-30 19:25:36 +02:00
protocol.c Linux-2.6.12-rc2 2005-04-16 15:20:36 -07:00
raw.c [MLSXFRM]: Add flow labeling 2006-09-22 14:53:27 -07:00
reassembly.c Remove obsolete #include <linux/config.h> 2006-06-30 19:25:36 +02:00
route.c [IPV6]: SNMPv2 "ipv6IfStatsInAddrErrors" counter error 2006-08-29 21:22:15 -07:00
sit.c [IPV4]: Get rid of redundant IPCB->opts initialisation 2006-07-21 14:29:53 -07:00
sysctl_net_ipv6.c Remove obsolete #include <linux/config.h> 2006-06-30 19:25:36 +02:00
tcp_ipv6.c [MLSXFRM]: Auto-labeling of child sockets 2006-09-22 14:53:29 -07:00
tunnel6.c [INET]: Move no-tunnel ICMP error to tunnel4/tunnel6 2006-04-09 22:25:25 -07:00
udp.c [MLSXFRM]: Add flow labeling 2006-09-22 14:53:27 -07:00
xfrm6_input.c [IPSEC] xfrm: Abstract out encapsulation modes 2006-06-17 21:28:39 -07:00
xfrm6_mode_transport.c [IPSEC] proto: Move transport mode input path into xfrm_mode_transport 2006-06-17 21:28:41 -07:00
xfrm6_mode_tunnel.c [IPSEC] xfrm: Abstract out encapsulation modes 2006-06-17 21:28:39 -07:00
xfrm6_output.c [XFRM]: Fix protocol field value for outgoing IPv6 GSO packets 2006-08-02 13:38:13 -07:00
xfrm6_policy.c Remove obsolete #include <linux/config.h> 2006-06-30 19:25:36 +02:00
xfrm6_state.c [IPSEC] xfrm: Undo afinfo lock proliferation 2006-06-17 21:28:37 -07:00
xfrm6_tunnel.c [IPV6] xfrm6_tunnel: Delete debugging code. 2006-07-24 13:49:06 -07:00