Paul Moore 5dbe1eb0cf SELinux: Allow NetLabel to directly cache SIDs ...

Now that the SELinux NetLabel "base SID" is always the netmsg initial SID we
can do a big optimization - caching the SID and not just the MLS attributes.
This not only saves a lot of per-packet memory allocations and copies but it
has a nice side effect of removing a chunk of code.

Signed-off-by: Paul Moore <paul.moore@hp.com>
Signed-off-by: James Morris <jmorris@namei.org>

2008-01-30 08:17:27 +11:00

..

include

SELinux: Allow NetLabel to directly cache SIDs

2008-01-30 08:17:27 +11:00

ss

SELinux: Allow NetLabel to directly cache SIDs

2008-01-30 08:17:27 +11:00

avc.c

SELinux: Only store the network interface's ifindex

2008-01-30 08:17:22 +11:00

exports.c

SELinux: Enable dynamic enable/disable of the network access checks

2008-01-30 08:17:26 +11:00

hooks.c

SELinux: Allow NetLabel to directly cache SIDs

2008-01-30 08:17:27 +11:00

Kconfig

SELinux: Add a capabilities bitmap to SELinux policy version 22

2008-01-30 08:17:23 +11:00

Makefile

SELinux: Add a network node caching mechanism similar to the sel_netif_*() functions

2008-01-30 08:17:23 +11:00

netif.c

SELinux: Convert the netif code to use ifindex values

2008-01-30 08:17:21 +11:00

netlabel.c

SELinux: Allow NetLabel to directly cache SIDs

2008-01-30 08:17:27 +11:00

netlink.c

[NET]: Support multiple network namespaces with netlink

2007-10-10 16:49:09 -07:00

netnode.c

SELinux: Add a network node caching mechanism similar to the sel_netif_*() functions

2008-01-30 08:17:23 +11:00

nlmsgtab.c

Audit: add TTY input auditing

2007-07-16 09:05:47 -07:00

selinuxfs.c

SELinux: Add a capabilities bitmap to SELinux policy version 22

2008-01-30 08:17:23 +11:00

xfrm.c

SELinux: Enable dynamic enable/disable of the network access checks

2008-01-30 08:17:26 +11:00