linux.git/net/netlabel, branch v2.6.26-rc7

Audit: collect sessionid in netlink messages

2008-04-28T10:18:03+00:00

Previously I added sessionid output to all audit messages where it was
available but we still didn't know the sessionid of the sender of
netlink messages.  This patch adds that information to netlink messages
so we can audit who sent netlink messages.

Signed-off-by: Eric Paris 
Signed-off-by: Al Viro

[NETLABEL]: Fix NULL deref in netlbl_unlabel_staticlist_gen() if ifindex not found

2008-04-18T06:22:54+00:00

dev_get_by_index() may return NULL if nothing is found. In 
net/netlabel/netlabel_unlabeled.c::netlbl_unlabel_staticlist_gen() the 
function is called, but the return value is never checked. If it returns 
NULL then we'll deref a NULL pointer on the very next line.
I checked the callers, and I don't think this can actually happen today, 
but code changes over time and in the future it might happen and it does 
no harm to be defensive and check for the failure, so that if/when it 
happens we'll fail gracefully instead of crashing.

Signed-off-by: Jesper Juhl 
Acked-by: Paul Moore 
Signed-off-by: David S. Miller

[NET] NETNS: Omit net_device->nd_net without CONFIG_NET_NS.

2008-03-25T19:39:53+00:00

Introduce per-net_device inlines: dev_net(), dev_net_set().
Without CONFIG_NET_NS, no namespace other than &init_net exists.
Let's explicitly define them to help compiler optimizations.

Signed-off-by: YOSHIFUJI Hideaki

[NETLABEL]: Move some initialization code into __init section.

2008-02-18T06:33:57+00:00

Everything that is called from netlbl_init() can be marked with
__init. This moves 620 bytes from .text section to .text.init one.

Signed-off-by: Pavel Emelyanov 
Acked-by: Paul Moore 
Signed-off-by: David S. Miller

[NETLABEL]: Shrink the genl-ops registration code.

2008-02-18T06:33:16+00:00

Turning them to array and registration in a loop saves
80 lines of code and ~300 bytes from text section.

Signed-off-by: Pavel Emelyanov 
Acked-by: Paul Moore 
Signed-off-by: David S. Miller

[NETLABLE]: Hide netlbl_unlabel_audit_addr6 under ifdef CONFIG_IPV6.

2008-02-13T06:38:06+00:00

This one is called from under this config only, so move
it in the same place.

Signed-off-by: Pavel Emelyanov 
Signed-off-by: David S. Miller

[NETLABEL]: Don't produce unused variables when IPv6 is off.

2008-02-13T06:37:19+00:00

Some code declares variables on the stack, but uses them
under #ifdef CONFIG_IPV6, so thay become unused when ipv6
is off. Fortunately, they are used in a switch's case
branches, so the fix is rather simple.

Is it OK from coding style POV to add braces inside "cases",
or should I better avoid such style and rework the patch?

Signed-off-by: Pavel Emelyanov 
Signed-off-by: David S. Miller

[NETLABEL]: Compilation for CONFIG_AUDIT=n case.

2008-02-13T06:35:37+00:00

The audit_log_start() will expand into an empty do { } while (0)
construction and the audit_ctx becomes unused.

The solution: push current->audit_context into audit_log_start()
directly, since it is not required in any other place in the 
calling function.

Signed-off-by: Pavel Emelyanov 
Signed-off-by: David S. Miller

[NETLABEL]: Fix lookup logic of netlbl_domhsh_search_def.

2008-02-13T06:15:14+00:00

Currently, if the call to netlbl_domhsh_search succeeds the
return result will still be NULL.

Fix that, by returning the found entry (if any).

Signed-off-by: Pavel Emelyanov 
Acked-by: Paul Moore 
Signed-off-by: David S. Miller

NetLabel: introduce a new kernel configuration API for NetLabel

2008-02-05T17:44:20+00:00

Add a new set of configuration functions to the NetLabel/LSM API so that
LSMs can perform their own configuration of the NetLabel subsystem without
relying on assistance from userspace.

Signed-off-by: Paul Moore 
Signed-off-by: Casey Schaufler 
Reviewed-by: James Morris 
Cc: Chris Wright 
Cc: Stephen Smalley 
Cc: Casey Schaufler 
Signed-off-by: Andrew Morton 
Signed-off-by: Linus Torvalds