Chris PeBenito 2be4d74f2f Add SELinux policy capability for always checking packet and peer classes. ... Currently the packet class in SELinux is not checked if there are no SECMARK rules in the security or mangle netfilter tables. Some systems prefer that packets are always checked, for example, to protect the system should the netfilter rules fail to load or if the nefilter rules were maliciously flushed. Add the always_check_network policy capability which, when enabled, treats SECMARK as enabled, even if there are no netfilter SECMARK rules and treats peer labeling as enabled, even if there is no Netlabel or labeled IPSEC configuration. Includes definition of "redhat1" SELinux policy capability, which exists in the SELinux userpace library, to keep ordering correct. The SELinux userpace portion of this was merged last year, but this kernel change fell on the floor. Signed-off-by: Chris PeBenito <cpebenito@tresys.com> Signed-off-by: Eric Paris <eparis@redhat.com>		2013-07-25 13:03:38 -04:00
..
audit.h
avc.h	SELinux: avc: remove the useless fields in avc_add_callback	2012-04-09 12:23:44 -04:00
avc_ss.h	selinux: sparse fix: fix several warnings in the security server code	2011-09-09 16:56:32 -07:00
classmap.h	selinux: add the "attach_queue" permission to the "tun_socket" class	2013-01-14 18:16:59 -05:00
conditional.h
initial_sid_to_string.h
netif.h	doc: Update the email address for Paul Moore in various source files	2011-08-01 17:58:33 -07:00
netlabel.h	doc: Update the email address for Paul Moore in various source files	2011-08-01 17:58:33 -07:00
netnode.h	doc: Update the email address for Paul Moore in various source files	2011-08-01 17:58:33 -07:00
netport.h	doc: Update the email address for Paul Moore in various source files	2011-08-01 17:58:33 -07:00
objsec.h	SELinux: change sbsec->behavior to short	2013-07-25 13:03:09 -04:00
security.h	Add SELinux policy capability for always checking packet and peer classes.	2013-07-25 13:03:38 -04:00
xfrm.h	selinux: remove the BUG_ON() from selinux_skb_xfrm_sid()	2013-07-25 13:02:13 -04:00