From: Paul Moore Date: Fri, 27 Mar 2009 21:10:54 +0000 (-0400) Subject: netlabel: Cleanup the Smack/NetLabel code to fix incoming TCP connections X-Git-Tag: v2.6.30-rc1~630^2~1 X-Git-Url: http://git.openpandora.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=07feee8f812f7327a46186f7604df312c8c81962;p=pandora-kernel.git netlabel: Cleanup the Smack/NetLabel code to fix incoming TCP connections This patch cleans up a lot of the Smack network access control code. The largest changes are to fix the labeling of incoming TCP connections in a manner similar to the recent SELinux changes which use the security_inet_conn_request() hook to label the request_sock and let the label move to the child socket via the normal network stack mechanisms. In addition to the incoming TCP connection fixes this patch also removes the smk_labled field from the socket_smack struct as the minor optimization advantage was outweighed by the difficulty in maintaining it's proper state. Signed-off-by: Paul Moore Acked-by: Casey Schaufler Signed-off-by: James Morris --- Reading git-diff-tree failed