calipso: Allow request sockets to be relabelled by the lsm.
authorHuw Davies <huw@codeweavers.com>
Mon, 27 Jun 2016 19:05:29 +0000 (15:05 -0400)
committerPaul Moore <paul@paul-moore.com>
Mon, 27 Jun 2016 19:05:29 +0000 (15:05 -0400)
commite1adea927080821ebfa7505bff752a4015955660
treeadbbbe9962bf497bdf119849a37c8bbcc1eea034
parent56ac42bc94b18d45b6c484edeac33be86bfb3efa
calipso: Allow request sockets to be relabelled by the lsm.

Request sockets need to have a label that takes into account the
incoming connection as well as their parent's label.  This is used
for the outgoing SYN-ACK and for their child full-socket.

Signed-off-by: Huw Davies <huw@codeweavers.com>
Signed-off-by: Paul Moore <paul@paul-moore.com>
include/net/netlabel.h
net/ipv6/calipso.c
net/netlabel/netlabel_calipso.c
net/netlabel/netlabel_calipso.h
net/netlabel/netlabel_kapi.c
security/selinux/netlabel.c