From mboxrd@z Thu Jan 1 00:00:00 1970 From: James Morris Subject: [RFC][SECMARK 06/08] Define a relabelto permission in the SELinux packet class Date: Sun, 7 May 2006 11:38:08 -0400 (EDT) Message-ID: References: Mime-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Cc: netdev@vger.kernel.org, netfilter-devel@lists.samba.org, Stephen Smalley , Daniel J Walsh Return-path: Received: from mail8.sea5.speakeasy.net ([69.17.117.10]:62945 "EHLO mail8.sea5.speakeasy.net") by vger.kernel.org with ESMTP id S932186AbWEGPiY (ORCPT ); Sun, 7 May 2006 11:38:24 -0400 To: selinux@tycho.nsa.gov In-Reply-To: Sender: netdev-owner@vger.kernel.org List-Id: netdev.vger.kernel.org This patch defines a new permission ('relabelto') in the new SELinux packet object class, to be used when setting SECMARK rules for labeling packets. Signed-off-by: James Morris --- security/selinux/include/av_perm_to_string.h | 1 + security/selinux/include/av_permissions.h | 2 +- 2 files changed, 2 insertions(+), 1 deletion(-) diff -purN -X dontdiff linux-2.6.17-rc3-git7.p/security/selinux/include/av_permissions.h linux-2.6.17-rc3-git7.w/security/selinux/include/av_permissions.h --- linux-2.6.17-rc3-git7.p/security/selinux/include/av_permissions.h 2006-05-03 11:34:17.000000000 -0400 +++ linux-2.6.17-rc3-git7.w/security/selinux/include/av_permissions.h 2006-05-07 00:14:13.000000000 -0400 @@ -935,4 +935,4 @@ #define PACKET__SEND 0x00000001UL #define PACKET__RECV 0x00000002UL - +#define PACKET__RELABELTO 0x00000004UL diff -purN -X dontdiff linux-2.6.17-rc3-git7.p/security/selinux/include/av_perm_to_string.h linux-2.6.17-rc3-git7.w/security/selinux/include/av_perm_to_string.h --- linux-2.6.17-rc3-git7.p/security/selinux/include/av_perm_to_string.h 2006-05-03 11:34:17.000000000 -0400 +++ linux-2.6.17-rc3-git7.w/security/selinux/include/av_perm_to_string.h 2006-05-07 00:14:34.000000000 -0400 @@ -241,3 +241,4 @@ S_(SECCLASS_ASSOCIATION, ASSOCIATION__SETCONTEXT, "setcontext") S_(SECCLASS_PACKET, PACKET__SEND, "send") S_(SECCLASS_PACKET, PACKET__RECV, "recv") + S_(SECCLASS_PACKET, PACKET__RELABELTO, "relabelto")