diff options
| author |   Venkat Yekkirala <vyekkirala@TrustedCS.com> | 2006-08-04 23:12:42 -0700 |
|---|---|---|
| committer |   David S. Miller <davem@sunset.davemloft.net> | 2006-09-22 14:53:27 -0700 |
| commit | beb8d13bed80f8388f1a9a107d07ddd342e627e8 (patch) | |
| tree | 19d5763b9b3b8ff3969997565e5ec0edd6e4bd33 /net/dccp/ipv4.c | |
| parent | [MLSXFRM]: Add security context to acquire messages using PF_KEY (diff) | |
| download | linux-dev-beb8d13bed80f8388f1a9a107d07ddd342e627e8.tar.xz linux-dev-beb8d13bed80f8388f1a9a107d07ddd342e627e8.zip | |
[MLSXFRM]: Add flow labeling
This labels the flows that could utilize IPSec xfrms at the points the
flows are defined so that IPSec policy and SAs at the right label can
be used.
The following protos are currently not handled, but they should
continue to be able to use single-labeled IPSec like they currently
do.
ipmr
ip_gre
ipip
igmp
sit
sctp
ip6_tunnel (IPv6 over IPv6 tunnel device)
decnet
Signed-off-by: Venkat Yekkirala <vyekkirala@TrustedCS.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
Diffstat (limited to 'net/dccp/ipv4.c')
| -rw-r--r-- | net/dccp/ipv4.c | 1 |
1 files changed, 1 insertions, 0 deletions
diff --git a/net/dccp/ipv4.c b/net/dccp/ipv4.c index 7f56f7e8f571..386498053b1c 100644 --- a/net/dccp/ipv4.c +++ b/net/dccp/ipv4.c @@ -678,6 +678,7 @@ static struct dst_entry* dccp_v4_route_skb(struct sock *sk, } }; + security_skb_classify_flow(skb, &fl); if (ip_route_output_flow(&rt, &fl, sk, 0)) { IP_INC_STATS_BH(IPSTATS_MIB_OUTNOROUTES); return NULL; |