Eric Dumazet ca10b9e9a8 selinux: add a skb_owned_by() hook ... Commit 90ba9b1986 (tcp: tcp_make_synack() can use alloc_skb()) broke certain SELinux/NetLabel configurations by no longer correctly assigning the sock to the outgoing SYNACK packet. Cost of atomic operations on the LISTEN socket is quite big, and we would like it to happen only if really needed. This patch introduces a new security_ops->skb_owned_by() method, that is a void operation unless selinux is active. Reported-by: Miroslav Vadkerti <mvadkert@redhat.com> Diagnosed-by: Paul Moore <pmoore@redhat.com> Signed-off-by: Eric Dumazet <edumazet@google.com> Cc: "David S. Miller" <davem@davemloft.net> Cc: linux-security-module@vger.kernel.org Acked-by: James Morris <james.l.morris@oracle.com> Tested-by: Paul Moore <pmoore@redhat.com> Acked-by: Paul Moore <pmoore@redhat.com> Signed-off-by: David S. Miller <davem@davemloft.net>		2013-04-09 13:23:11 -04:00
..
apparmor
integrity
keys
selinux	selinux: add a skb_owned_by() hook	2013-04-09 13:23:11 -04:00
smack
tomoyo
yama
capability.c	selinux: add a skb_owned_by() hook	2013-04-09 13:23:11 -04:00
commoncap.c
device_cgroup.c
inode.c
Kconfig
lsm_audit.c
Makefile
min_addr.c
security.c	selinux: add a skb_owned_by() hook	2013-04-09 13:23:11 -04:00