calipso: Set the calipso socket label to match the secattr.
authorHuw Davies <huw@codeweavers.com>
Mon, 27 Jun 2016 19:02:51 +0000 (15:02 -0400)
committerPaul Moore <paul@paul-moore.com>
Mon, 27 Jun 2016 19:02:51 +0000 (15:02 -0400)
commitceba1832b1b2da0149c51de62a847c00bca1677a
tree5f03426f96c98a387cc1087865fe99b32410561c
parent3faa8f982f958961fda68b8d63e682fe77a032d4
calipso: Set the calipso socket label to match the secattr.

CALIPSO is a hop-by-hop IPv6 option.  A lot of this patch is based on
the equivalent CISPO code.  The main difference is due to manipulating
the options in the hop-by-hop header.

Signed-off-by: Huw Davies <huw@codeweavers.com>
Signed-off-by: Paul Moore <paul@paul-moore.com>
include/net/ipv6.h
include/net/netlabel.h
include/uapi/linux/in6.h
net/ipv6/calipso.c
net/ipv6/ipv6_sockglue.c
net/netlabel/Kconfig
net/netlabel/netlabel_calipso.c
net/netlabel/netlabel_calipso.h
net/netlabel/netlabel_kapi.c
security/selinux/netlabel.c