Commit 2917f57b authored by Committed by Paul Moore
calipso: Allow the lsm to label the skbuff directly.
In some cases, the lsm needs to add the label to the skbuff directly. A NF_INET_LOCAL_OUT IPv6 hook is added to selinux to match the IPv4 behaviour. This allows selinux to label the skbuffs that it requires. Signed-off-by: Huw Davies <firstname.lastname@example.org> Signed-off-by: Paul Moore <email@example.com>
Showing with 308 additions and 4 deletions