Piecuu/linux-samsung-r9q2
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity
linux-samsung-r9q2/include/linux/netfilter
History
Eric Paris 1cc63249ad conntrack: export lsm context rather than internal secid via netlink 
The conntrack code can export the internal secid to userspace.  These are
dynamic, can change on lsm changes, and have no meaning in userspace.  We
should instead be sending lsm contexts to userspace instead.  This patch sends
the secctx (rather than secid) to userspace over the netlink socket.  We use a
new field CTA_SECCTX and stop using the the old CTA_SECMARK field since it did
not send particularly useful information.

Signed-off-by: Eric Paris <eparis@redhat.com>
Reviewed-by: Paul Moore <paul.moore@hp.com>
Acked-by: Patrick McHardy <kaber@trash.net>
Signed-off-by: James Morris <jmorris@namei.org>
2010-10-21 10:12:51 +11:00
..
Kbuild include: replace unifdef-y with header-y 2010-08-14 22:26:51 +02:00
nf_conntrack_amanda.h [NETFILTER]: Replace sk_buff ** with sk_buff * 2007-10-15 12:26:29 -07:00
nf_conntrack_common.h netfilter: nf_conntrack: IPS_UNTRACKED bit 2010-06-08 16:09:52 +02:00
nf_conntrack_dccp.h [NETFILTER]: nf_conntrack: add DCCP protocol support 2008-04-14 11:15:49 +02:00
nf_conntrack_ftp.h net: cleanup include/linux 2009-11-04 09:50:58 -08:00
nf_conntrack_h323.h [NETFILTER]: Introduce nf_inet_address 2008-01-28 14:59:07 -08:00
nf_conntrack_h323_asn1.h
nf_conntrack_h323_types.h
nf_conntrack_irc.h [NETFILTER]: Replace sk_buff ** with sk_buff * 2007-10-15 12:26:29 -07:00
nf_conntrack_pptp.h [NETFILTER]: nf_{conntrack,nat}_pptp: annotate PPtP helper with const 2008-01-31 19:28:09 -08:00
nf_conntrack_proto_gre.h netfilter: netns nf_conntrack: GRE conntracking in netns 2008-10-08 11:35:10 +02:00
nf_conntrack_sane.h
nf_conntrack_sctp.h net: cleanup include/linux 2009-11-04 09:50:58 -08:00
nf_conntrack_sip.h netfilter: nf_conntrack_sip: add T.38 FAX support 2010-02-11 12:30:21 +01:00
nf_conntrack_tcp.h Merge branch 'master' of git://git.kernel.org/pub/scm/linux/kernel/git/kaber/nf-next-2.6 2009-12-03 13:23:12 -08:00
nf_conntrack_tftp.h [NETFILTER]: Replace sk_buff ** with sk_buff * 2007-10-15 12:26:29 -07:00
nf_conntrack_tuple_common.h netfilter: include/linux/netfilter/nf_conntrack_tuple_common.h: Checkpatch cleanup 2010-03-08 13:13:07 +01:00
nfnetlink.h netfilter: ctnetlink: fix reliable event delivery if message building fails 2010-03-20 14:29:03 -07:00
nfnetlink_compat.h net: cleanup include/linux 2009-11-04 09:50:58 -08:00
nfnetlink_conntrack.h conntrack: export lsm context rather than internal secid via netlink 2010-10-21 10:12:51 +11:00
nfnetlink_log.h nfnetlink_log: do not expose NFULNL_COPY_DISABLED to user-space 2010-07-15 11:27:41 +02:00
nfnetlink_queue.h make netfilter use strict integer types 2009-03-26 18:14:20 +01:00
x_tables.h netfilter: xtables: stackptr should be percpu 2010-05-31 16:41:35 +02:00
xt_CHECKSUM.h netfilter: correct CHECKSUM header and export it 2010-07-16 14:08:20 +02:00
xt_CLASSIFY.h make netfilter use strict integer types 2009-03-26 18:14:20 +01:00
xt_cluster.h netfilter: xt_cluster: fix use of cluster match with 32 nodes 2009-05-05 17:46:07 +02:00
xt_comment.h
xt_connbytes.h net: cleanup include/linux 2009-11-04 09:50:58 -08:00
xt_connlimit.h [NETFILTER]: Annotate start of kernel fields in NF headers 2008-01-28 15:02:19 -08:00
xt_connmark.h netfilter: xtables: merge xt_CONNMARK into xt_connmark 2010-03-17 15:48:36 +01:00
xt_CONNMARK.h netfilter: xtables: merge xt_CONNMARK into xt_connmark 2010-03-17 15:48:36 +01:00
xt_CONNSECMARK.h make netfilter use strict integer types 2009-03-26 18:14:20 +01:00
xt_conntrack.h netfilter: xtables: remove xt_conntrack v0 2009-08-10 13:09:44 +02:00
xt_cpu.h netfilter: add xt_cpu match 2010-07-23 12:59:36 +02:00
xt_CT.h netfilter: nf_conntrack: add support for "conntrack zones" 2010-02-15 18:13:33 +01:00
xt_dccp.h make netfilter use strict integer types 2009-03-26 18:14:20 +01:00
xt_DSCP.h make netfilter use strict integer types 2009-03-26 18:14:20 +01:00
xt_dscp.h make netfilter use strict integer types 2009-03-26 18:14:20 +01:00
xt_esp.h net: cleanup include/linux 2009-11-04 09:50:58 -08:00
xt_hashlimit.h make netfilter use strict integer types 2009-03-26 18:14:20 +01:00
xt_helper.h
xt_IDLETIMER.h header: fix broken headers for user space 2010-08-22 21:15:39 -07:00
xt_iprange.h make netfilter use strict integer types 2009-03-26 18:14:20 +01:00
xt_ipvs.h netfilter: fix userspace header warning 2010-08-18 23:34:26 -07:00
xt_LED.h netfilter: add missing linux/types.h include to xt_LED.h 2009-05-05 14:31:12 +02:00
xt_length.h make netfilter use strict integer types 2009-03-26 18:14:20 +01:00
xt_limit.h Merge branch 'header-fixes-for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/tip/linux-2.6-tip 2009-03-26 16:11:41 -07:00
xt_mac.h
xt_mark.h netfilter: xtables: merge xt_MARK into xt_mark 2010-03-17 15:48:36 +01:00
xt_MARK.h netfilter: xtables: merge xt_MARK into xt_mark 2010-03-17 15:48:36 +01:00
xt_multiport.h net: cleanup include/linux 2009-11-04 09:50:58 -08:00
xt_NFLOG.h Merge commit 'v2.6.29' into core/header-fixes 2009-03-26 18:29:40 +01:00
xt_NFQUEUE.h netfilter: xt_NFQUEUE: queue balancing support 2009-06-05 13:24:24 +02:00
xt_osf.h netfilter: headers_check fix: linux/netfilter/xt_osf.h 2009-06-29 14:28:27 +02:00
xt_owner.h make netfilter use strict integer types 2009-03-26 18:14:20 +01:00
xt_physdev.h make netfilter use strict integer types 2009-03-26 18:14:20 +01:00
xt_pkttype.h
xt_policy.h net: cleanup include/linux 2009-11-04 09:50:58 -08:00
xt_quota.h xt_quota: report initial quota value instead of current value to userspace 2010-07-23 14:07:47 +02:00
xt_RATEEST.h make netfilter use strict integer types 2009-03-26 18:14:20 +01:00
xt_rateest.h make netfilter use strict integer types 2009-03-26 18:14:20 +01:00
xt_realm.h make netfilter use strict integer types 2009-03-26 18:14:20 +01:00
xt_recent.h netfilter: xt_recent: check for unsupported user space flags 2010-03-17 16:18:56 +01:00
xt_sctp.h make netfilter use strict integer types 2009-03-26 18:14:20 +01:00
xt_SECMARK.h secmark: make secmark object handling generic 2010-10-21 10:12:48 +11:00
xt_socket.h netfilter: xt_socket: added new revision of the 'socket' match supporting flags 2009-06-09 15:16:34 +02:00
xt_state.h net: cleanup include/linux 2009-11-04 09:50:58 -08:00
xt_statistic.h Merge branch 'header-fixes-for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/tip/linux-2.6-tip 2009-03-26 16:11:41 -07:00
xt_string.h net: cleanup include/linux 2009-11-04 09:50:58 -08:00
xt_TCPMSS.h make netfilter use strict integer types 2009-03-26 18:14:20 +01:00
xt_tcpmss.h make netfilter use strict integer types 2009-03-26 18:14:20 +01:00
xt_TCPOPTSTRIP.h [NETFILTER]: x_tables: add TCPOPTSTRIP target 2008-01-28 14:55:51 -08:00
xt_tcpudp.h net: cleanup include/linux 2009-11-04 09:50:58 -08:00
xt_TEE.h netfilter: xt_TEE: resolve oif using netdevice notifiers 2010-04-20 15:07:32 +02:00
xt_time.h [NETFILTER]: x_tables: add xt_time match 2007-10-10 16:53:40 -07:00
xt_TPROXY.h netfilter: iptables TPROXY target 2008-10-08 11:35:12 +02:00
xt_u32.h