Smack: Local IPv6 port based controls
authorCasey Schaufler <casey@schaufler-ca.com>
Thu, 23 May 2013 01:42:56 +0000 (18:42 -0700)
committerYin Kangkai <kangkai.yin@linux.intel.com>
Thu, 26 Dec 2013 14:33:53 +0000 (22:33 +0800)
commit9116419fb54231737519320e0aaec9f218bed0c8
tree56a5e29ff147510be2cabbc3ddea65887739ffa0
parentef4f18984a0d79b1cbaa31fab168502203646222
Smack: Local IPv6 port based controls

commit c673944347edfd4362b10eea11ac384a582b1cf5 upstream

Smack does not provide access controls on IPv6 communications.
This patch introduces a mechanism for maintaining Smack lables
for local IPv6 communications. It is based on labeling local ports.
The behavior should be compatible with any future "real" IPv6
support as it provides no interfaces for users to manipulate
the labeling. Remote IPv6 connections use the ambient label
the same way that unlabeled IPv4 packets are treated.

Targeted for git://git.gitorious.org/smack-next/kernel.git

Signed-off-by: Casey Schaufler <casey@schaufler-ca.com>
Signed-off-by: Heikki Krogerus <heikki.krogerus@linux.intel.com>
security/smack/smack.h
security/smack/smack_lsm.c