[MLSXFRM]: Define new SELinux service routine
authorVenkat Yekkirala <vyekkirala@TrustedCS.com>
Tue, 25 Jul 2006 06:27:16 +0000 (23:27 -0700)
committerDavid S. Miller <davem@sunset.davemloft.net>
Fri, 22 Sep 2006 21:53:21 +0000 (14:53 -0700)
commit08554d6b33e60aa8ee40bbef94505941c0eefef2
tree1610750ccd13872a33fffffcce057e10aa785d2e
parent51bd39860ff829475aef611a3234309e37e090d9
[MLSXFRM]: Define new SELinux service routine

This defines a routine that combines the Type Enforcement portion of
one sid with the MLS portion from the other sid to arrive at a new
sid. This would be used to define a sid for a security association
that is to be negotiated by IKE as well as for determing the sid for
open requests and connection-oriented child sockets.

Signed-off-by: Venkat Yekkirala <vyekkirala@TrustedCS.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
security/selinux/include/security.h
security/selinux/ss/mls.c
security/selinux/ss/mls.h
security/selinux/ss/services.c