Huw Davies 1f440c99d3 netlabel: Prevent setsockopt() from changing the hop-by-hop option. ...

If a socket has a netlabel in place then don't let setsockopt() alter
the socket's IPv6 hop-by-hop option.  This is in the same spirit as
the existing check for IPv4.

Signed-off-by: Huw Davies <huw@codeweavers.com>
Signed-off-by: Paul Moore <paul@paul-moore.com>

2016-06-27 15:05:27 -04:00

..

include

selinux: distinguish non-init user namespace capability checks

2016-04-26 15:41:43 -04:00

ss

selinux: import NetLabel category bitmaps correctly

2016-06-09 10:40:37 -04:00

.gitignore

SELinux: add .gitignore files for dynamic classes

2009-10-24 09:42:27 +08:00

avc.c

Merge branch 'next' of git://git.infradead.org/users/pcmoore/selinux into next

2015-08-15 13:29:57 +10:00

exports.c

selinux: sparse fix: include selinux.h in exports.c

2011-09-09 16:56:32 -07:00

hooks.c

selinux: apply execstack check on thread stacks

2016-04-26 15:47:57 -04:00

Kconfig

selinux: change CONFIG_SECURITY_SELINUX_CHECKREQPROT_VALUE default

2015-10-21 17:44:25 -04:00

Makefile

selinux: use absolute path to include directory

2016-01-28 10:37:15 -05:00

netif.c

Merge commit 'v3.17' into next

2014-11-19 21:32:12 +11:00

netlabel.c

netlabel: Prevent setsockopt() from changing the hop-by-hop option.

2016-06-27 15:05:27 -04:00

netlink.c

selinux: replace obsolete NLMSG_* with type safe nlmsg_*

2013-03-28 14:25:49 -04:00

netnode.c

selinux: remove unused variabled in the netport, netnode, and netif caches

2014-08-07 20:55:30 -04:00

netport.c

selinux: remove unused variabled in the netport, netnode, and netif caches

2014-08-07 20:55:30 -04:00

nlmsgtab.c

selinux: nlmsgtab: add SOCK_DESTROY to the netlink mapping tables

2016-02-09 04:55:05 -05:00

selinuxfs.c

selinux: fix type mismatch

2016-06-15 16:20:28 -04:00

xfrm.c

netfilter: Remove spurios included of netfilter.h

2015-06-18 21:14:32 +02:00