[MLSXFRM]: Flow based matching of xfrm policy and state
authorVenkat Yekkirala <vyekkirala@TrustedCS.com>
Tue, 25 Jul 2006 06:29:07 +0000 (23:29 -0700)
committerDavid S. Miller <davem@sunset.davemloft.net>
Fri, 22 Sep 2006 21:53:24 +0000 (14:53 -0700)
commite0d1caa7b0d5f02e4f34aa09c695d04251310c6c
treebf023c17abf6813f2694ebf5fafff82edd6a1023
parentb6340fcd761acf9249b3acbc95c4dc555d9beb07
[MLSXFRM]: Flow based matching of xfrm policy and state

This implements a seemless mechanism for xfrm policy selection and
state matching based on the flow sid. This also includes the necessary
SELinux enforcement pieces.

Signed-off-by: Venkat Yekkirala <vyekkirala@TrustedCS.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
include/linux/security.h
include/net/flow.h
net/core/flow.c
net/xfrm/xfrm_policy.c
net/xfrm/xfrm_state.c
security/dummy.c
security/selinux/hooks.c
security/selinux/include/xfrm.h
security/selinux/xfrm.c