[RFC 2/8] NetLabel: core network changes

2006-06-22 Thread paul . moore
CIPSO never became a full IETF RFC standard many vendors + * have chosen to adopt the protocol and over the years it has become a + * de-facto standard for labeled networking. + * + * Author: Paul Moore [EMAIL PROTECTED] + * + */ + +/* + * (c) Copyright Hewlett-Packard Development Company, L.P., 2006

[RFC 1/8] NetLabel: documentation

2006-06-22 Thread paul . moore
=== --- linux-2.6.17.i686-quilt.orig/CREDITS +++ linux-2.6.17.i686-quilt/CREDITS @@ -2383,6 +2383,13 @@ N: Thomas Molina E: [EMAIL PROTECTED] D: bug fixes, documentation, minor hackery +N: Paul Moore +E: [EMAIL PROTECTED] +D: NetLabel author +S: Hewlett

[RFC 8/8] NetLabel: tie NetLabel into the Kconfig system

2006-06-22 Thread paul . moore
+++ linux-2.6.17.i686-quilt/net/Kconfig @@ -228,6 +228,8 @@ source net/tux/Kconfig config WIRELESS_EXT bool +source net/netlabel/Kconfig + endif # if NET endmenu # Networking -- paul moore linux security @ hp - To unsubscribe from this list: send the line unsubscribe netdev

[RFC 6/8] NetLabel: CIPSOv4 integration

2006-06-22 Thread paul . moore
Support + * + * This file defines the CIPSO/IPv4 functions for the NetLabel system. The + * NetLabel system manages static and dynamic label mappings for network + * protocols such as CIPSO and RIPSO. + * + * Author: Paul Moore [EMAIL PROTECTED] + * + */ + +/* + * (c) Copyright Hewlett-Packard

[RFC 2/7] NetLabel: core network changes

2006-06-21 Thread paul . moore
, - struct socket *newsock) +static int dummy_socket_post_accept (struct socket *sock, +struct socket *newsock) { - return; + return 0; } static int dummy_socket_sendmsg (struct socket *sock, struct msghdr *msg, -- paul moore linux

[RFC 1/7] NetLabel: documentation

2006-06-21 Thread paul . moore
=== --- linux-2.6.17.i686-quilt.orig/CREDITS +++ linux-2.6.17.i686-quilt/CREDITS @@ -2383,6 +2383,13 @@ N: Thomas Molina E: [EMAIL PROTECTED] D: bug fixes, documentation, minor hackery +N: Paul Moore +E: [EMAIL PROTECTED] +D: NetLabel author +S: Hewlett

[RFC 0/7] Updated NetLabel patch

2006-06-21 Thread paul . moore
the NetLabel tools. The tools are used to configure the NetLabel subsystem, documentation (including a man page) is included in the tarball. The NetLabel tools, as well as more information, can be found here: * http://free.linux.hp.com/~pmoore/projects/linux_cipso Thanks. -- paul moore linux security

[RFC 5/7] NetLabel: SELinux support

2006-06-21 Thread paul . moore
Solutions, Inc. * [EMAIL PROTECTED] + * Copyright (C) 2006 Hewlett-Packard Development Company, L.P. + * Paul Moore, [EMAIL PROTECTED] * * This program is free software; you can redistribute it and/or modify * it under the terms of the GNU

[RFC 3/7] NetLabel: CIPSOv4 engine

2006-06-21 Thread paul . moore
documents can be found in the Documentation + * directory. While CIPSO never became a full IETF RFC standard many vendors + * have chosen to adopt the protocol and over the years it has become a + * de-facto standard for labeled networking. + * + * Author: Paul Moore [EMAIL PROTECTED

[RFC 7/7] NetLabel: unlabeled packet handling

2006-06-21 Thread paul . moore
@@ +/* + * NetLabel Unlabeled Support + * + * This file defines functions for dealing with unlabeled packets for the + * NetLabel system. The NetLabel system manages static and dynamic label + * mappings for network protocols such as CIPSO and RIPSO. + * + * Author: Paul Moore [EMAIL PROTECTED

Re: [RFC 0/4] NetLabel

2006-05-26 Thread Paul Moore
James Morris wrote: On Thu, 25 May 2006, Paul Moore wrote: This patch introduces a new kernel feature designed to support labeled networking protocols such as RIPSO and CIPSO. These protocols are required to interoperate with existing trusted operating systems such as Trusted Solaris. A few

Re: [RFC 0/4] NetLabel

2006-05-26 Thread Paul Moore
Mikel L. Matthews wrote: Paul Moore wrote: James Morris wrote: On Thu, 25 May 2006, Paul Moore wrote: This patch introduces a new kernel feature designed to support labeled networking protocols such as RIPSO and CIPSO. These protocols are required to interoperate with existing trusted

Re: [RFC 0/4] NetLabel

2006-05-26 Thread Paul Moore
James Morris wrote: On Fri, 26 May 2006, Paul Moore wrote: - Why does this module have a version number? + printk(KERN_INFO NetLabel: Initializing (v%s %s)\n, + NETLBL_VER_STR, NETLBL_VER_DATE); The version number is there primarily to help signal possible differences

[RFC 0/4] NetLabel

2006-05-25 Thread Paul Moore
/selinux/ss/mls.h | 25 security/selinux/ss/services.c| 252 + security/selinux/xfrm.c | 22 39 files changed, 7156 insertions(+), 21 deletions(-) -- paul moore linux security @ hp - To unsubscribe from

Re: [RFC 0/4] NetLabel

2006-05-25 Thread Paul Moore
Stephen Hemminger wrote: On Thu, 25 May 2006 16:06:01 -0400 Paul Moore [EMAIL PROTECTED] wrote: This patch introduces a new kernel feature designed to support labeled networking protocols such as RIPSO and CIPSO. These protocols are required to interoperate with existing trusted operating

<    1   2   3   4   5   6