calipso: Allow the lsm to label the skbuff directly.
authorHuw Davies <huw@codeweavers.com>
Mon, 27 Jun 2016 19:06:15 +0000 (15:06 -0400)
committerPaul Moore <paul@paul-moore.com>
Mon, 27 Jun 2016 19:06:15 +0000 (15:06 -0400)
commit2917f57b6bc15cc6787496ee5f2fdf17f0e9b7d3
treecf6e68541ba82eb7c4b11a7ba563f423060d8b46
parent0868383b822e4d8ebde980c7aac973a6aa81a3ec
calipso: Allow the lsm to label the skbuff directly.

In some cases, the lsm needs to add the label to the skbuff directly.
A NF_INET_LOCAL_OUT IPv6 hook is added to selinux to match the IPv4
behaviour.  This allows selinux to label the skbuffs that it requires.

Signed-off-by: Huw Davies <huw@codeweavers.com>
Signed-off-by: Paul Moore <paul@paul-moore.com>
include/net/netlabel.h
net/ipv6/calipso.c
net/netlabel/netlabel_calipso.c
net/netlabel/netlabel_calipso.h
net/netlabel/netlabel_kapi.c
security/selinux/hooks.c