diff options
| author | Venkat Yekkirala <vyekkirala@TrustedCS.com> | 2006-08-04 23:08:56 -0700 |
|---|---|---|
| committer | David S. Miller <davem@sunset.davemloft.net> | 2006-09-22 14:53:22 -0700 |
| commit | 892c141e62982272b9c738b5520ad0e5e1ad7b42 (patch) | |
| tree | c8e0c9b3e55106d2cb085a5047b9d02dbbb28653 /security/dummy.c | |
| parent | 08554d6b33e60aa8ee40bbef94505941c0eefef2 (diff) | |
| download | op-kernel-dev-892c141e62982272b9c738b5520ad0e5e1ad7b42.zip op-kernel-dev-892c141e62982272b9c738b5520ad0e5e1ad7b42.tar.gz | |
[MLSXFRM]: Add security sid to sock
This adds security for IP sockets at the sock level. Security at the
sock level is needed to enforce the SELinux security policy for
security associations even when a sock is orphaned (such as in the TCP
LAST_ACK state).
This will also be used to enforce SELinux controls over data arriving
at or leaving a child socket while it's still waiting to be accepted.
Signed-off-by: Venkat Yekkirala <vyekkirala@TrustedCS.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
Diffstat (limited to 'security/dummy.c')
| -rw-r--r-- | security/dummy.c | 5 |
1 files changed, 5 insertions, 0 deletions
diff --git a/security/dummy.c b/security/dummy.c index 58c6d39..bd3bc5f 100644 --- a/security/dummy.c +++ b/security/dummy.c @@ -805,6 +805,10 @@ static inline void dummy_sk_free_security (struct sock *sk) { } +static inline void dummy_sk_clone_security (const struct sock *sk, struct sock *newsk) +{ +} + static unsigned int dummy_sk_getsid(struct sock *sk, struct flowi *fl, u8 dir) { return 0; @@ -1060,6 +1064,7 @@ void security_fixup_ops (struct security_operations *ops) set_to_dummy_if_null(ops, socket_getpeersec_dgram); set_to_dummy_if_null(ops, sk_alloc_security); set_to_dummy_if_null(ops, sk_free_security); + set_to_dummy_if_null(ops, sk_clone_security); set_to_dummy_if_null(ops, sk_getsid); #endif /* CONFIG_SECURITY_NETWORK */ #ifdef CONFIG_SECURITY_NETWORK_XFRM |
