tree f65c12b53bf2ad02645ea31522f67e7318019498
parent 9f2ad66509b182b399a5b03de487f45bde623524
author Paul Moore <paul.moore@hp.com> 1163803134 -0500
committer David S. Miller <davem@sunset.davemloft.net> 1165123454 -0800

SELinux: peer secid consolidation for external network labeling

Now that labeled IPsec makes use of the peer_sid field in the
sk_security_struct we can remove a lot of the special cases between labeled
IPsec and NetLabel.  In addition, create a new function,
security_skb_extlbl_sid(), which we can use in several places to get the
security context of the packet's external label which allows us to further
simplify the code in a few places.

Signed-off-by: Paul Moore <paul.moore@hp.com>
Signed-off-by: James Morris <jmorris@namei.org>