Casey Schaufler 677264e8fb Smack: network label match fix ... The Smack code that matches incoming CIPSO tags with Smack labels reaches through the NetLabel interfaces and compares the network data with the CIPSO header associated with a Smack label. This was done in a ill advised attempt to optimize performance. It works so long as the categories fit in a single capset, but this isn't always the case. This patch changes the Smack code to use the appropriate NetLabel interfaces to compare the incoming CIPSO header with the CIPSO header associated with a label. It will always match the CIPSO headers correctly. Targeted for git://git.gitorious.org/smack-next/kernel.git Signed-off-by: Casey Schaufler <casey@schaufler-ca.com>		2013-08-01 20:04:02 -07:00
..
Kconfig	Smack: use select not depends in Kconfig	2012-12-14 10:57:10 -08:00
Makefile
smack.h	Smack: network label match fix	2013-08-01 20:04:02 -07:00
smack_access.c	security: smack: add a hash table to quicken smk_find_entry()	2013-08-01 16:55:20 -07:00
smack_lsm.c	Smack: network label match fix	2013-08-01 20:04:02 -07:00
smackfs.c	Smack: network label match fix	2013-08-01 20:04:02 -07:00