diff options
| author |   Huw Davies <huw@codeweavers.com> | 2016-06-27 15:05:29 -0400 |
|---|---|---|
| committer |   Paul Moore <paul@paul-moore.com> | 2016-06-27 15:05:29 -0400 |
| commit | e1adea927080821ebfa7505bff752a4015955660 (patch) | |
| tree | adbbbe9962bf497bdf119849a37c8bbcc1eea034 /net/netlabel/netlabel_calipso.h | |
| parent | ipv6: Allow request socks to contain IPv6 options. (diff) | |
| download | linux-dev-e1adea927080821ebfa7505bff752a4015955660.tar.xz linux-dev-e1adea927080821ebfa7505bff752a4015955660.zip | |
calipso: Allow request sockets to be relabelled by the lsm.
Request sockets need to have a label that takes into account the
incoming connection as well as their parent's label. This is used
for the outgoing SYN-ACK and for their child full-socket.
Signed-off-by: Huw Davies <huw@codeweavers.com>
Signed-off-by: Paul Moore <paul@paul-moore.com>
Diffstat (limited to 'net/netlabel/netlabel_calipso.h')
| -rw-r--r-- | net/netlabel/netlabel_calipso.h | 4 |
1 files changed, 4 insertions, 0 deletions
diff --git a/net/netlabel/netlabel_calipso.h b/net/netlabel/netlabel_calipso.h index 49bc116705c4..1372fdd86588 100644 --- a/net/netlabel/netlabel_calipso.h +++ b/net/netlabel/netlabel_calipso.h @@ -133,5 +133,9 @@ int calipso_sock_setattr(struct sock *sk, const struct calipso_doi *doi_def, const struct netlbl_lsm_secattr *secattr); void calipso_sock_delattr(struct sock *sk); +int calipso_req_setattr(struct request_sock *req, + const struct calipso_doi *doi_def, + const struct netlbl_lsm_secattr *secattr); +void calipso_req_delattr(struct request_sock *req); #endif |