netdev - Re: [RFC PATCH v6 12/16] selinux: Set socket NetLabel based on connection endpoint

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-Id: <7DC4373B-194C-43FC-B4FB-B867999CAE76@nall.com>
Date:	Wed, 1 Oct 2008 09:51:31 -0500
From:	Joe Nall <joe@...l.com>
To:	James Morris <jmorris@...ei.org>
Cc:	Paul Moore <paul.moore@...com>, selinux@...ho.nsa.gov,
	linux-security-module@...r.kernel.org, netdev@...r.kernel.org
Subject: Re: [RFC PATCH v6 12/16] selinux: Set socket NetLabel based on connection endpoint


On Oct 1, 2008, at 5:00 AM, James Morris wrote:

> On Tue, 16 Sep 2008, Paul Moore wrote:
>
>> /**
>> + * cipso_v4_sock_delattr - Delete the CIPSO option from a socket
>> + * @sk: the socket
>> + *
>> + * Description:
>> + * Removes the CIPSO option from a socket, if present.
>> + *
>> + */
>> +void cipso_v4_sock_delattr(struct sock *sk)
>
> Reviewed-by: James Morris <jmorris@...ei.org>
>
>
> Btw, what kind of testing has this patch had?

Paul generated a patch for us against 2.6.26-5 that we have on about  
20 developer and test boxes with good results in MLS enforcing. We are  
adding IPSec between machines and static fallback labels  to the test  
mix and will report any issues. We have a couple of 8 core machines  
I'll stress test on to look for SMP issues.

joe


--
To unsubscribe from this list: send the line "unsubscribe netdev" in
the body of a message to majordomo@...r.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html