]> git.proxmox.com Git - mirror_ubuntu-artful-kernel.git/commit - security/selinux/hooks.c
SELinux: Add new labeling type native labels
authorDavid Quigley <dpquigl@davequigley.com>
Wed, 22 May 2013 16:50:37 +0000 (12:50 -0400)
committerTrond Myklebust <Trond.Myklebust@netapp.com>
Sat, 8 Jun 2013 20:20:12 +0000 (16:20 -0400)
commiteb9ae686507bc5a5ca78e6b3fbe629cd5cc67864
tree9b2c265703bc94af3d99ec5a5a00d626ae906519
parent649f6e7718891fe7691e5084ce3fa623acba3129
SELinux: Add new labeling type native labels

There currently doesn't exist a labeling type that is adequate for use with
labeled NFS. Since NFS doesn't really support xattrs we can't use the use xattr
labeling behavior. For this we developed a new labeling type. The native
labeling type is used solely by NFS to ensure NFS inodes are labeled at runtime
by the NFS code instead of relying on the SELinux security server on the client
end.

Acked-by: Eric Paris <eparis@redhat.com>
Acked-by: James Morris <james.l.morris@oracle.com>
Signed-off-by: Matthew N. Dodd <Matthew.Dodd@sparta.com>
Signed-off-by: Miguel Rodel Felipe <Rodel_FM@dsi.a-star.edu.sg>
Signed-off-by: Phua Eu Gene <PHUA_Eu_Gene@dsi.a-star.edu.sg>
Signed-off-by: Khin Mi Mi Aung <Mi_Mi_AUNG@dsi.a-star.edu.sg>
Signed-off-by: Trond Myklebust <Trond.Myklebust@netapp.com>
include/linux/security.h
security/selinux/hooks.c
security/selinux/include/security.h
security/selinux/ss/policydb.c