tree 02adcb6fe6c346a8b99cf161ba5233ed1e572727
parent cb969f072b6d67770b559617f14e767f47e77ece
author Venkat Yekkirala <vyekkirala@TrustedCS.com> 1153809170 -0700
committer David S. Miller <davem@sunset.davemloft.net> 1158962009 -0700

[MLSXFRM]: Auto-labeling of child sockets

This automatically labels the TCP, Unix stream, and dccp child sockets
as well as openreqs to be at the same MLS level as the peer. This will
result in the selection of appropriately labeled IPSec Security
Associations.

This also uses the sock's sid (as opposed to the isec sid) in SELinux
enforcement of secmark in rcv_skb and postroute_last hooks.

Signed-off-by: Venkat Yekkirala <vyekkirala@TrustedCS.com>
Signed-off-by: David S. Miller <davem@davemloft.net>