netfilter: nfnetlink_queue: add security context information 28/70028/3
authorRoman Kubiak <r.kubiak@samsung.com>
Fri, 12 Jun 2015 10:32:57 +0000 (12:32 +0200)
committerSeung-Woo Kim <sw0312.kim@samsung.com>
Thu, 23 Jun 2016 01:39:28 +0000 (18:39 -0700)
commit3ef99f24bad664c750efacfa57f184e42c35ad94
treefa32deb751527d82c7d38e71df248d95054be02f
parent87c2fc825970efacd79ce476094d23a26be495aa
netfilter: nfnetlink_queue: add security context information

This patch adds an additional attribute when sending
packet information via netlink in netfilter_queue module.
It will send additional security context data, so that
userspace applications can verify this context against
their own security databases.

Signed-off-by: Roman Kubiak <r.kubiak@samsung.com>
Acked-by: Florian Westphal <fw@strlen.de>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
[backport from mainline commint, "ef493bd netfilter: nfnetlink_queue: add security context information" for security nether service]
Signed-off-by: Seung-Woo Kim <sw0312.kim@samsung.com>
Change-Id: I304b2851b08a9c5c01c340cbbf273b491faa6c30
include/uapi/linux/netfilter/nfnetlink_queue.h
net/netfilter/nfnetlink_queue_core.c