Re: [RFC 2/7] NetLabel: core network changes

2006-06-22 Thread David Miller
From: Steve Grubb <[EMAIL PROTECTED]> Date: Thu, 22 Jun 2006 11:05:00 -0400 > If moving this over to generic is a must, then I think SE Linux will > have to clip into generic to control its packet flow. James Morris has already started discussions on this. It's great that there will be another re

Re: [RFC 2/7] NetLabel: core network changes

2006-06-22 Thread James Morris
On Thu, 22 Jun 2006, Steve Grubb wrote: > On Thursday 22 June 2006 05:00, David Miller wrote: > > >  #define NETLINK_GENERIC  16 > > > +#define NETLINK_NETLABEL 17  /* Network packet labeling */ > > >   > > >  #define MAX_LINKS 32  > > > > Please use generic netlink. >

Re: [RFC 2/7] NetLabel: core network changes

2006-06-22 Thread Steve Grubb
On Thursday 22 June 2006 05:00, David Miller wrote: > >  #define NETLINK_GENERIC  16 > > +#define NETLINK_NETLABEL 17  /* Network packet labeling */ > >   > >  #define MAX_LINKS 32  > > Please use generic netlink. Since this is a security interface, shouldn't it be its

Re: [RFC 2/7] NetLabel: core network changes

2006-06-22 Thread Paul Moore
On Thursday 22 June 2006 5:07 am, David Miller wrote: > From: [EMAIL PROTECTED] > Date: Wed, 21 Jun 2006 15:42:37 -0400 > > > Index: linux-2.6.17.i686-quilt/net/ipv4/Makefile > > === > > --- linux-2.6.17.i686-quilt.orig/net/ipv4/Makefi

Re: [RFC 2/7] NetLabel: core network changes

2006-06-22 Thread David Miller
From: [EMAIL PROTECTED] Date: Wed, 21 Jun 2006 15:42:37 -0400 > Index: linux-2.6.17.i686-quilt/net/ipv4/Makefile > === > --- linux-2.6.17.i686-quilt.orig/net/ipv4/Makefile > +++ linux-2.6.17.i686-quilt/net/ipv4/Makefile > @@ -42,6 +42

Re: [RFC 2/7] NetLabel: core network changes

2006-06-22 Thread David Miller
From: [EMAIL PROTECTED] Date: Wed, 21 Jun 2006 15:42:37 -0400 > Index: linux-2.6.17.i686-quilt/include/linux/netlink.h > === > --- linux-2.6.17.i686-quilt.orig/include/linux/netlink.h > +++ linux-2.6.17.i686-quilt/include/linux/netlin

[RFC 2/7] NetLabel: core network changes

2006-06-21 Thread paul . moore
Changes to the core network stack to support the NetLabel subsystem. This includes changes to support the NetLabel NETLINK communication mechanism, changes to the IPv4 option handling to support CIPSO labels, minor changes to the socket_post_create() LSM hook so that it can return error codes, and