tree 42c04b3247ede13077546e13f82fe3da83ce7b90
parent 13541b3adad2dc2f56761c5193c2b88db3597f0e
author Paul Moore <paul.moore@hp.com> 1201614567 -0500
committer James Morris <jmorris@namei.org> 1201641450 +1100

SELinux: Add network ingress and egress control permission checks

This patch implements packet ingress/egress controls for SELinux which allow
SELinux security policy to control the flow of all IPv4 and IPv6 packets into
and out of the system.  Currently SELinux does not have proper control over
forwarded packets and this patch corrects this problem.

Special thanks to Venkat Yekkirala <vyekkirala@trustedcs.com> whose earlier
work on this topic eventually led to this patch.

Signed-off-by: Paul Moore <paul.moore@hp.com>
Signed-off-by: James Morris <jmorris@namei.org>