From: Casey Schaufler <casey@schaufler-ca.com>
To: Paul Moore <paul.moore@hp.com>
Cc: selinux@tycho.nsa.gov, netdev@vger.kernel.org,
linux-security-module@vger.kernel.org
Subject: Re: [RFC PATCH v4 00/14] Labeled networking patches for 2.6.28
Date: Tue, 02 Sep 2008 20:48:04 -0700 [thread overview]
Message-ID: <48BE08F4.3040604@schaufler-ca.com> (raw)
In-Reply-To: <20080903003647.15669.45349.stgit@flek.lan>
Paul Moore wrote:
> Another updated spin of the labeled networking patches for 2.6.28. No new
> functionality this time around just some bug fixes, including a particularly
> fun one to correct the way we determine if a packet is locally generated or
> the result of forwarded traffic. The previous solution, check to see if
> (skb->sk == NULL), did not work in all cases (hint: can be triggered by
> certain igmp packets which can be generated by the avahi-daemon, note: the
> avahi-daemon appears to be the source of some interesting corner cases).
>
> Since I'm reasonable certain there are no really nasty regressions, I've added sign-offs to all the patches now. I expect there will probably be another
> spin or two to take care of bugs yet to be found and fix other various things
> that pop-up (maybe even the Smack stuff if I can find the time)
I'm pulling the git right now, much to the annoyance of one
particular skype user. Snicker. I've only been able to fiddle
around, we'll see how far I get.
> but the
> patches are in reasonably good shape right now. I also did a test
> merge/compile with the September 2nd linux-next tree and there were no nasty
> surprises so I'm also pushing these patches to my lblnet-2.6_next tree which
> means you should see them in tomorrow's linux-next tree if all goes well.
>
> Any feedback, comments, or testing is appreciated. As usual, the patches can
> also be found here:
>
> * git://git.infradead.org/users/pcmoore/lblnet-2.6_testing
>
> Thanks.
>
Thank you, you're the one doing the work.
next prev parent reply other threads:[~2008-09-03 3:48 UTC|newest]
Thread overview: 26+ messages / expand[flat|nested] mbox.gz Atom feed top
2008-09-03 0:48 [RFC PATCH v4 00/14] Labeled networking patches for 2.6.28 Paul Moore
2008-09-03 0:48 ` [RFC PATCH v4 01/14] netlabel: Remove unneeded in-kernel API functions Paul Moore
2008-09-03 0:48 ` [RFC PATCH v4 02/14] selinux: Better local/forward check in selinux_ip_postroute() Paul Moore
2008-09-05 8:51 ` James Morris
2008-09-05 21:58 ` Paul Moore
2008-09-03 0:49 ` [RFC PATCH v4 03/14] selinux: Fix a problem in security_netlbl_sid_to_secattr() Paul Moore
2008-09-05 8:53 ` James Morris
2008-09-03 0:49 ` [RFC PATCH v4 04/14] selinux: Fix missing calls to netlbl_skbuff_err() Paul Moore
2008-09-05 8:55 ` James Morris
2008-09-03 0:49 ` [RFC PATCH v4 05/14] smack: " Paul Moore
2008-09-03 0:49 ` [RFC PATCH v4 06/14] netlabel: Replace protocol/NetLabel linking with refrerence counts Paul Moore
2008-09-03 0:49 ` [RFC PATCH v4 07/14] netlabel: Add a generic way to create ordered linked lists of network addrs Paul Moore
2008-09-03 0:49 ` [RFC PATCH v4 08/14] netlabel: Add network address selectors to the NetLabel/LSM domain mapping Paul Moore
2008-09-03 0:49 ` [RFC PATCH v4 09/14] netlabel: Add functionality to set the security attributes of a packet Paul Moore
2008-09-05 9:03 ` James Morris
2008-09-03 0:49 ` [RFC PATCH v4 10/14] selinux: Set socket NetLabel based on connection endpoint Paul Moore
2008-09-05 9:08 ` James Morris
2008-09-03 0:50 ` [RFC PATCH v4 11/14] selinux: Cache NetLabel secattrs in the socket's security struct Paul Moore
2008-09-05 9:12 ` James Morris
2008-09-03 0:50 ` [RFC PATCH v4 12/14] netlabel: Changes to the NetLabel security attributes to allow LSMs to pass full contexts Paul Moore
2008-09-05 9:12 ` James Morris
2008-09-03 0:50 ` [RFC PATCH v4 13/14] cipso: Add support for native local labeling and fixup mapping names Paul Moore
2008-09-03 0:50 ` [RFC PATCH v4 14/14] netlabel: Add configuration support for local labeling Paul Moore
2008-09-03 3:48 ` Casey Schaufler [this message]
2008-09-03 14:05 ` [RFC PATCH v4 00/14] Labeled networking patches for 2.6.28 Paul Moore
2008-09-04 11:44 ` Paul Moore
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=48BE08F4.3040604@schaufler-ca.com \
--to=casey@schaufler-ca.com \
--cc=linux-security-module@vger.kernel.org \
--cc=netdev@vger.kernel.org \
--cc=paul.moore@hp.com \
--cc=selinux@tycho.nsa.gov \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for NNTP newsgroup(s).