Steffen Klassert 4a7ab3dcad selinux: Fix packet forwarding checks on postrouting ... The IPSKB_FORWARDED and IP6SKB_FORWARDED flags are used only in the multicast forwarding case to indicate that a packet looped back after forward. So these flags are not a good indicator for packet forwarding. A better indicator is the incoming interface. If we have no socket context, but an incoming interface and we see the packet in the ip postroute hook, the packet is going to be forwarded. With this patch we use the incoming interface as an indicator on packet forwarding. Signed-off-by: Steffen Klassert <steffen.klassert@secunet.com> Acked-by: Paul Moore <paul.moore@hp.com> Signed-off-by: Eric Paris <eparis@redhat.com>		2011-02-25 15:00:51 -05:00
..
apparmor
integrity/ima	ima: fix add LSM rule bug	2011-01-03 16:36:33 -08:00
keys	Merge branch 'master' into next	2011-01-10 09:46:24 +11:00
selinux	selinux: Fix packet forwarding checks on postrouting	2011-02-25 15:00:51 -05:00
smack	fs/vfs/security: pass last path component to LSM on inode creation	2011-02-01 11:12:29 -05:00
tomoyo	fs: dcache scale d_unhashed	2011-01-07 17:50:21 +11:00
capability.c	security: remove unused security_sysctl hook	2011-02-01 11:54:02 -05:00
commoncap.c
device_cgroup.c
inode.c
Kconfig
lsm_audit.c
Makefile
min_addr.c
security.c	security: remove unused security_sysctl hook	2011-02-01 11:54:02 -05:00