Christian Göttsche 7470d0d13f selinux: allow kernfs symlinks to inherit parent directory context ... Currently symlinks on kernel filesystems, like sysfs, are labeled on creation with the parent filesystem root sid. Allow symlinks to inherit the parent directory context, so fine-grained kernfs labeling can be applied to symlinks too and checking contexts doesn't complain about them. For backward-compatibility this behavior is contained in a new policy capability: genfs_seclabel_symlinks Signed-off-by: Christian Göttsche <cgzones@googlemail.com> Acked-by: Stephen Smalley <sds@tycho.nsa.gov> Signed-off-by: Paul Moore <paul@paul-moore.com>		2020-02-10 10:49:01 -05:00
..
audit.h	treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 500	2019-06-19 17:09:55 +02:00
avc_ss.h	selinux: wrap AVC state	2018-03-20 16:58:17 -04:00
avc.h	selinux: fall back to ref-walk if audit is required	2019-12-09 18:37:47 -05:00
classmap.h	security,lockdown,selinux: implement SELinux lockdown	2019-12-09 17:53:58 -05:00
conditional.h	treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 372	2019-06-05 17:37:10 +02:00
ibpkey.h	selinux: move ibpkeys code under CONFIG_SECURITY_INFINIBAND.	2020-01-10 11:56:37 -05:00
initial_sid_to_string.h	License cleanup: add SPDX GPL-2.0 license identifier to files with no license	2017-11-02 11:10:55 +01:00
netif.h	treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 500	2019-06-19 17:09:55 +02:00
netlabel.h	treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 13	2019-05-21 11:28:45 +02:00
netnode.h	treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 295	2019-06-05 17:36:38 +02:00
netport.h	treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 295	2019-06-05 17:36:38 +02:00
objsec.h	selinux: randomize layout of key structures	2019-12-18 21:26:06 -05:00
security.h	selinux: allow kernfs symlinks to inherit parent directory context	2020-02-10 10:49:01 -05:00
xfrm.h	security: Remove rtnl_lock() in selinux_xfrm_notify_policyload()	2018-03-29 13:47:53 -04:00