diff options
| author | David Quigley <[email protected]> | 2013-05-22 12:50:37 -0400 |
|---|---|---|
| committer | Trond Myklebust <[email protected]> | 2013-06-08 16:20:12 -0400 |
| commit | eb9ae686507bc5a5ca78e6b3fbe629cd5cc67864 (patch) | |
| tree | 9b2c265703bc94af3d99ec5a5a00d626ae906519 /include | |
| parent | 649f6e7718891fe7691e5084ce3fa623acba3129 (diff) | |
SELinux: Add new labeling type native labels
There currently doesn't exist a labeling type that is adequate for use with
labeled NFS. Since NFS doesn't really support xattrs we can't use the use xattr
labeling behavior. For this we developed a new labeling type. The native
labeling type is used solely by NFS to ensure NFS inodes are labeled at runtime
by the NFS code instead of relying on the SELinux security server on the client
end.
Acked-by: Eric Paris <[email protected]>
Acked-by: James Morris <[email protected]>
Signed-off-by: Matthew N. Dodd <[email protected]>
Signed-off-by: Miguel Rodel Felipe <[email protected]>
Signed-off-by: Phua Eu Gene <[email protected]>
Signed-off-by: Khin Mi Mi Aung <[email protected]>
Signed-off-by: Trond Myklebust <[email protected]>
Diffstat (limited to 'include')
| -rw-r--r-- | include/linux/security.h | 3 |
1 files changed, 3 insertions, 0 deletions
diff --git a/include/linux/security.h b/include/linux/security.h index aa656fbc4308..a585a9085e46 100644 --- a/include/linux/security.h +++ b/include/linux/security.h @@ -61,6 +61,9 @@ struct mm_struct; #define SECURITY_CAP_NOAUDIT 0 #define SECURITY_CAP_AUDIT 1 +/* LSM Agnostic defines for sb_set_mnt_opts */ +#define SECURITY_LSM_NATIVE_LABELS 1 + struct ctl_table; struct audit_krule; struct user_namespace; |