Files
kernel/include/linux
Paul Moore 446fda4f26 [NetLabel]: CIPSOv4 engine
Add support for the Commercial IP Security Option (CIPSO) to the IPv4
network stack.  CIPSO has become a de-facto standard for
trusted/labeled networking amongst existing Trusted Operating Systems
such as Trusted Solaris, HP-UX CMW, etc.  This implementation is
designed to be used with the NetLabel subsystem to provide explicit
packet labeling to LSM developers.

The CIPSO/IPv4 packet labeling works by the LSM calling a NetLabel API
function which attaches a CIPSO label (IPv4 option) to a given socket;
this in turn attaches the CIPSO label to every packet leaving the
socket without any extra processing on the outbound side.  On the
inbound side the individual packet's sk_buff is examined through a
call to a NetLabel API function to determine if a CIPSO/IPv4 label is
present and if so the security attributes of the CIPSO label are
returned to the caller of the NetLabel API function.

Signed-off-by: Paul Moore <paul.moore@hp.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
2006-09-22 14:53:33 -07:00
..
2006-08-03 16:56:02 -04:00
2006-09-07 15:57:12 +01:00
2006-09-11 13:32:30 -04:00
2006-07-03 15:27:06 -07:00
2006-07-03 19:44:51 -07:00
2006-07-01 09:56:03 -07:00
2006-08-27 11:01:32 -07:00
2006-07-28 21:02:00 -07:00
2006-07-03 15:27:03 -07:00
2006-07-03 15:27:03 -07:00
2006-08-21 10:02:50 +02:00
2006-09-22 14:53:32 -07:00
2006-07-31 13:28:39 -07:00
2006-07-03 15:27:00 -07:00
2006-07-14 21:53:56 -07:00
2006-07-14 21:53:55 -07:00
2006-08-27 11:01:32 -07:00
2006-07-12 16:05:48 -07:00
2006-08-19 17:44:31 -04:00
2006-07-03 19:48:25 -07:00
2006-09-01 11:39:08 -07:00
2006-09-22 14:53:33 -07:00
2006-07-03 23:30:54 +02:00
2006-08-06 08:57:47 -07:00
2006-07-10 13:24:25 -07:00