Stephen Smalley 941fc5b2bf selinux: drop remapping of netlink classes ... Drop remapping of netlink classes and bypass of permission checking based on netlink message type for policy version < 18. This removes compatibility code introduced when the original single netlink security class used for all netlink sockets was split into finer-grained netlink classes based on netlink protocol and when permission checking was added based on netlink message type in Linux 2.6.8. The only known distribution that shipped with SELinux and policy < 18 was Fedora Core 2, which was EOL'd on 2005-04-11. Given that the remapping code was never updated to address the addition of newer netlink classes, that the corresponding userland support was dropped in 2005, and that the assumptions made by the remapping code about the fixed ordering among netlink classes in the policy may be violated in the future due to the dynamic class/perm discovery support, we should drop this compatibility code now. Signed-off-by: Stephen Smalley <sds@tycho.nsa.gov> Signed-off-by: James Morris <jmorris@namei.org>		2009-10-07 21:56:46 +11:00
..
include	selinux: generate flask headers during kernel build	2009-10-07 21:56:44 +11:00
ss	selinux: drop remapping of netlink classes	2009-10-07 21:56:46 +11:00
avc.c	selinux: dynamic class/perm discovery	2009-10-07 21:56:42 +11:00
exports.c
hooks.c	selinux: drop remapping of netlink classes	2009-10-07 21:56:46 +11:00
Kconfig
Makefile	selinux: generate flask headers during kernel build	2009-10-07 21:56:44 +11:00
netif.c
netlabel.c
netlink.c
netnode.c
netport.c
nlmsgtab.c
selinuxfs.c	selinux: dynamic class/perm discovery	2009-10-07 21:56:42 +11:00
xfrm.c