linux-stable/security/selinux
Paul Moore 3e11217263 SELinux: Add network port SID cache
Much like we added a network node cache, this patch adds a network port
cache. The design is taken almost completely from the network node cache
which in turn was taken from the network interface cache.  The basic idea is
to cache entries in a hash table based on protocol/port information.  The
hash function only takes the port number into account since the number of
different protocols in use at any one time is expected to be relatively
small.

Signed-off-by: Paul Moore <paul.moore@hp.com>
Acked-by: Stephen Smalley <sds@tycho.nsa.gov>
Signed-off-by: James Morris <jmorris@namei.org>
2008-04-18 20:26:16 +10:00
..
include SELinux: Add network port SID cache 2008-04-18 20:26:16 +10:00
ss SELinux: Add network port SID cache 2008-04-18 20:26:16 +10:00
avc.c selinux: introduce permissive types 2008-04-18 20:26:11 +10:00
exports.c SELinux: Enable dynamic enable/disable of the network access checks 2008-01-30 08:17:26 +11:00
hooks.c SELinux: Add network port SID cache 2008-04-18 20:26:16 +10:00
Kconfig selinux: introduce permissive types 2008-04-18 20:26:11 +10:00
Makefile SELinux: Add network port SID cache 2008-04-18 20:26:16 +10:00
netif.c SELinux: Add warning messages on network denial due to error 2008-01-30 08:17:30 +11:00
netlabel.c selinux: selinux/netlabel.c should #include "netlabel.h" 2008-04-18 20:26:06 +10:00
netlink.c security: replace remaining __FUNCTION__ occurrences 2008-04-18 20:26:07 +10:00
netnode.c SELinux: Add warning messages on network denial due to error 2008-01-30 08:17:30 +11:00
nlmsgtab.c Audit: add TTY input auditing 2007-07-16 09:05:47 -07:00
selinuxfs.c security: replace remaining __FUNCTION__ occurrences 2008-04-18 20:26:07 +10:00
xfrm.c SELinux: Enable dynamic enable/disable of the network access checks 2008-01-30 08:17:26 +11:00