commit | 2917f57b6bc15cc6787496ee5f2fdf17f0e9b7d3 | [log] [tgz] |
---|---|---|
author | Huw Davies <huw@codeweavers.com> | Mon Jun 27 15:06:15 2016 -0400 |
committer | Paul Moore <paul@paul-moore.com> | Mon Jun 27 15:06:15 2016 -0400 |
tree | cf6e68541ba82eb7c4b11a7ba563f423060d8b46 | |
parent | 0868383b822e4d8ebde980c7aac973a6aa81a3ec [diff] |
calipso: Allow the lsm to label the skbuff directly. In some cases, the lsm needs to add the label to the skbuff directly. A NF_INET_LOCAL_OUT IPv6 hook is added to selinux to match the IPv4 behaviour. This allows selinux to label the skbuffs that it requires. Signed-off-by: Huw Davies <huw@codeweavers.com> Signed-off-by: Paul Moore <paul@paul-moore.com>