linux-toradex.git/include/linux/selinux.h, branch v2.6.24.2

SELinux: return EOPNOTSUPP not ENOTSUPP

2007-11-16T23:38:16+00:00

ENOTSUPP is not a valid error code in the kernel (it is defined in some
NFS internal error codes and has been improperly used other places).  In
the !CONFIG_SECURITY_SELINUX case though it is possible that we could
return this from selinux_audit_rule_init().  This patch just returns the
userspace valid EOPNOTSUPP.

Signed-off-by: Eric Paris 
Signed-off-by: James Morris

[PATCH] selinux: replace ctxid with sid in selinux_audit_rule_match interface

2006-09-26T15:48:52+00:00

Replace ctxid with sid in selinux_audit_rule_match interface for
consistency with other interfaces.

Signed-off-by: Stephen Smalley 
Acked-by: James Morris 
Signed-off-by: Andrew Morton 
Signed-off-by: Linus Torvalds

[PATCH] selinux: rename selinux_ctxid_to_string

2006-09-26T15:48:52+00:00

Rename selinux_ctxid_to_string to selinux_sid_to_string to be
consistent with other interfaces.

Signed-off-by: Stephen Smalley 
Acked-by: James Morris 
Signed-off-by: Andrew Morton 
Signed-off-by: Linus Torvalds

[PATCH] selinux: eliminate selinux_task_ctxid

2006-09-26T15:48:52+00:00

Eliminate selinux_task_ctxid since it duplicates selinux_task_get_sid.

Signed-off-by: Stephen Smalley 
Acked-by: James Morris 
Signed-off-by: Andrew Morton 
Signed-off-by: Linus Torvalds

[SECMARK]: Add SELinux exports

2006-06-18T04:29:55+00:00

Add and export new functions to the in-kernel SELinux API in support of the
new secmark-based packet controls.

Signed-off-by: James Morris 
Signed-off-by: Andrew Morton 
Signed-off-by: David S. Miller

[PATCH] Reworked patch for labels on user space messages

2006-05-01T10:09:58+00:00

The below patch should be applied after the inode and ipc sid patches.
This patch is a reworking of Tim's patch that has been updated to match
the inode and ipc patches since its similar.

[updated:
>  Stephen Smalley also wanted to change a variable from isec to tsec in the
>  user sid patch.                                                              ]

Signed-off-by: Steve Grubb 
Signed-off-by: Al Viro

[PATCH] change lspp ipc auditing

2006-05-01T10:09:56+00:00

Hi,

The patch below converts IPC auditing to collect sid's and convert to context
string only if it needs to output an audit record. This patch depends on the
inode audit change patch already being applied.

Signed-off-by: Steve Grubb 

Signed-off-by: Al Viro

[PATCH] audit inode patch

2006-05-01T10:09:53+00:00

Previously, we were gathering the context instead of the sid. Now in this patch,
we gather just the sid and convert to context only if an audit event is being
output.

This patch brings the performance hit from 146% down to 23%

Signed-off-by: Al Viro

[PATCH] support for context based audit filtering

2006-05-01T10:06:24+00:00

The following patch provides selinux interfaces that will allow the audit
system to perform filtering based on the process context (user, role, type,
sensitivity, and clearance).  These interfaces will allow the selinux
module to perform efficient matches based on lower level selinux constructs,
rather than relying on context retrievals and string comparisons within
the audit module.  It also allows for dominance checks on the mls portion
of the contexts that are impossible with only string comparisons.

Signed-off-by: Darrel Goeddel 
Signed-off-by: Al Viro