linux_dsm_epyc7002/security/smack
Etienne Basset 4303154e86 smack: Add a new '-CIPSO' option to the network address label configuration
This patch adds a new special option '-CIPSO' to the Smack subsystem. When used
in the netlabel list, it means "use CIPSO networking". A use case is when your
local network speaks CIPSO and you want also to connect to the unlabeled
Internet. This patch also add some documentation describing that. The patch
also corrects an oops when setting a '' SMACK64 xattr to a file.

Signed-off-by: Etienne Basset <etienne.basset@numericable.fr>
Signed-off-by: Paul Moore <paul.moore@hp.com>
Acked-by: Casey Schaufler <casey@schaufler-ca.com>
Signed-off-by: James Morris <jmorris@namei.org>
2009-03-28 15:01:37 +11:00
..
Kconfig Smack: Simplified Mandatory Access Control Kernel 2008-02-05 09:44:20 -08:00
Makefile Smack: Simplified Mandatory Access Control Kernel 2008-02-05 09:44:20 -08:00
smack_access.c smack: Add a new '-CIPSO' option to the network address label configuration 2009-03-28 15:01:37 +11:00
smack_lsm.c smack: Add a new '-CIPSO' option to the network address label configuration 2009-03-28 15:01:37 +11:00
smack.h smack: Add a new '-CIPSO' option to the network address label configuration 2009-03-28 15:01:37 +11:00
smackfs.c smack: Add a new '-CIPSO' option to the network address label configuration 2009-03-28 15:01:37 +11:00