tree 8a69c490accb7d5454bdfeb8c078d846729aeb60
parent 948bf85c1bc9a84754786a9d5dd99b7ecc46451e
author Paul Moore <paul.moore@hp.com> 1223648193 -0400
committer Paul Moore <paul.moore@hp.com> 1223648193 -0400

selinux: Set socket NetLabel based on connection endpoint

Previous work enabled the use of address based NetLabel selectors, which while
highly useful, brought the potential for additional per-packet overhead when
used.  This patch attempts to solve that by applying NetLabel socket labels
when sockets are connect()'d.  This should alleviate the per-packet NetLabel
labeling for all connected sockets (yes, it even works for connected DGRAM
sockets).

Signed-off-by: Paul Moore <paul.moore@hp.com>
Reviewed-by: James Morris <jmorris@namei.org>