Darrel Goeddel c7bdb545d2 [NETLINK]: Encapsulate eff_cap usage within security framework. ... This patch encapsulates the usage of eff_cap (in netlink_skb_params) within the security framework by extending security_netlink_recv to include a required capability parameter and converting all direct usage of eff_caps outside of the lsm modules to use the interface. It also updates the SELinux implementation of the security_netlink_send and security_netlink_recv hooks to take advantage of the sid in the netlink_skb_params struct. This also enables SELinux to perform auditing of netlink capability checks. Please apply, for 2.6.18 if possible. Signed-off-by: Darrel Goeddel <dgoeddel@trustedcs.com> Signed-off-by: Stephen Smalley <sds@tycho.nsa.gov> Acked-by: James Morris <jmorris@namei.org> Signed-off-by: David S. Miller <davem@davemloft.net>		2006-06-29 16:57:55 -07:00
..
include	[PATCH] SELinux: Add sockcreate node to procattr API	2006-06-26 09:58:26 -07:00
ss	[PATCH] fix se_sen audit filter	2006-06-20 05:25:26 -04:00
avc.c	[PATCH] support for context based audit filtering	2006-05-01 06:06:24 -04:00
exports.c	[SECMARK]: Add SELinux exports	2006-06-17 21:29:55 -07:00
hooks.c	[NETLINK]: Encapsulate eff_cap usage within security framework.	2006-06-29 16:57:55 -07:00
Kconfig	[SECMARK]: Add new packet controls to SELinux	2006-06-17 21:30:05 -07:00
Makefile	[PATCH] support for context based audit filtering	2006-05-01 06:06:24 -04:00
netif.c
netlink.c
nlmsgtab.c	Merge branch 'audit.b3' of git://git.kernel.org/pub/scm/linux/kernel/git/viro/audit-current	2006-03-25 09:24:53 -08:00
selinuxfs.c	[PATCH] VFS: Permit filesystem to override root dentry on mount	2006-06-23 07:42:45 -07:00
xfrm.c	[SECMARK]: Add new packet controls to SELinux	2006-06-17 21:30:05 -07:00