Paul Moore 014ab19a69 selinux: Set socket NetLabel based on connection endpoint ... Previous work enabled the use of address based NetLabel selectors, which while highly useful, brought the potential for additional per-packet overhead when used. This patch attempts to solve that by applying NetLabel socket labels when sockets are connect()'d. This should alleviate the per-packet NetLabel labeling for all connected sockets (yes, it even works for connected DGRAM sockets). Signed-off-by: Paul Moore <paul.moore@hp.com> Reviewed-by: James Morris <jmorris@namei.org>		2008-10-10 10:16:33 -04:00
..
keys	keys: remove unused key_alloc_sem	2008-06-06 11:29:11 -07:00
selinux	selinux: Set socket NetLabel based on connection endpoint	2008-10-10 10:16:33 -04:00
smack	netlabel: Replace protocol/NetLabel linking with refrerence counts	2008-10-10 10:16:31 -04:00
capability.c	security: Fix setting of PF_SUPERPRIV by __capable()	2008-08-14 22:59:43 +10:00
commoncap.c	security: Fix setting of PF_SUPERPRIV by __capable()	2008-08-14 22:59:43 +10:00
device_cgroup.c	devcgroup: fix race against rmdir()	2008-09-02 19:21:38 -07:00
inode.c	Kobject: convert remaining kobject_unregister() to kobject_put()	2008-01-24 20:40:40 -08:00
Kconfig	security: filesystem capabilities no longer experimental	2008-07-24 10:47:22 -07:00
Makefile	security: remove dummy module	2008-07-14 15:03:04 +10:00
root_plug.c	security: Fix setting of PF_SUPERPRIV by __capable()	2008-08-14 22:59:43 +10:00
security.c	security: Fix setting of PF_SUPERPRIV by __capable()	2008-08-14 22:59:43 +10:00