James Morris 2ee92d46c6 [SELinux]: Add support for DCCP ...

This patch implements SELinux kernel support for DCCP
(http://linux-net.osdl.org/index.php/DCCP), which is similar in
operation to TCP in terms of connected state between peers.

The SELinux support for DCCP is thus modeled on existing handling of
TCP.

A new DCCP socket class is introduced, to allow protocol
differentation.  The permissions for this class inherit all of the
socket permissions, as well as the current TCP permissions (node_bind,
name_bind etc). IPv4 and IPv6 are supported, although labeled
networking is not, at this stage.

Patches for SELinux userspace are at:
http://people.redhat.com/jmorris/selinux/dccp/user/

I've performed some basic testing, and it seems to be working as
expected.  Adding policy support is similar to TCP, the only real
difference being that it's a different protocol.

Acked-by: Stephen Smalley <[email protected]>
Signed-off-by: James Morris <[email protected]>
Signed-off-by: David S. Miller <[email protected]>

2006-12-02 21:22:24 -08:00

..

keys

…

selinux

[SELinux]: Add support for DCCP

2006-12-02 21:22:24 -08:00

capability.c

…

commoncap.c

…

dummy.c

SELinux: Fix SA selection semantics

2006-12-02 21:21:34 -08:00

inode.c

…

Kconfig

…

Makefile

…

root_plug.c

…

security.c

…