linux/security/selinux
Paul Moore 6c5b3fc014 selinux: Cache NetLabel secattrs in the socket's security struct
Previous work enabled the use of address based NetLabel selectors, which
while highly useful, brought the potential for additional per-packet overhead
when used.  This patch attempts to mitigate some of that overhead by caching
the NetLabel security attribute struct within the SELinux socket security
structure.  This should help eliminate the need to recreate the NetLabel
secattr structure for each packet resulting in less overhead.

Signed-off-by: Paul Moore <paul.moore@hp.com>
Acked-by: James Morris <jmorris@namei.org>
2008-10-10 10:16:33 -04:00
..
include selinux: Cache NetLabel secattrs in the socket's security struct 2008-10-10 10:16:33 -04:00
ss selinux: Fix a problem in security_netlbl_sid_to_secattr() 2008-10-10 10:16:30 -04:00
avc.c
exports.c
hooks.c selinux: Cache NetLabel secattrs in the socket's security struct 2008-10-10 10:16:33 -04:00
Kconfig
Makefile
netif.c
netlabel.c selinux: Cache NetLabel secattrs in the socket's security struct 2008-10-10 10:16:33 -04:00
netlink.c
netnode.c SELinux: keep the code clean formating and syntax 2008-07-14 15:01:36 +10:00
netport.c SELinux: keep the code clean formating and syntax 2008-07-14 15:01:36 +10:00
nlmsgtab.c
selinuxfs.c SELinux: more user friendly unknown handling printk 2008-07-14 15:02:00 +10:00
xfrm.c