Re: [PATCH kernel/tegra] enable secmark labeling for SE Android network access controls

[Joshua Brindle <jbrindle@tresys.com>]

Joshua Brindle wrote:
> Stephen Smalley wrote:
>> On Sat, 2012-06-16 at 14:56 -0400, Joshua Brindle wrote:
>>> Signed-off-by: Joshua Brindle<jbrindle@tresys.com>
>>> ---
>>> arch/arm/configs/stingray_defconfig | 4 ++++
>>> 1 file changed, 4 insertions(+)
>>>
>>> diff --git a/arch/arm/configs/stingray_defconfig
>>> b/arch/arm/configs/stingray_defconfig
>>> index e67e4d5..9fe1fdd 100644
>>> --- a/arch/arm/configs/stingray_defconfig
>>> +++ b/arch/arm/configs/stingray_defconfig
>>> @@ -459,3 +459,7 @@ CONFIG_SECURITY=y
>>> CONFIG_LSM_MMAP_MIN_ADDR=4096
>>> CONFIG_SECURITY_NETWORK=y
>>> CONFIG_SECURITY_SELINUX=y
>>> +CONFIG_NETWORK_SECMARK=y
>>> +CONFIG_NF_CONNTRACK_SECMARK=y
>>> +CONFIG_NETFILTER_XT_TARGET_CONNSECMARK=y
>>> +CONFIG_NETFILTER_XT_TARGET_SECMARK=y
>>
>> Thanks, merged.
>>
>> No samsung kernel patch?
>>
>
> We are only using AOSP devices, Galaxy Nexus is Omap and Xoom is Tegra. I'll add
> the secmark configs to the other kernels but I have no way of testing them.
>

And I forgot that the Nexus S uses the Samsung kernel. I still don't have one 
but I'll do the patch and let you test on yours :)

--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.