[SECMARK]: Add secmark support to core networking.
authorJames Morris <jmorris@namei.org>
Fri, 9 Jun 2006 07:29:17 +0000 (00:29 -0700)
committerDavid S. Miller <davem@sunset.davemloft.net>
Sun, 18 Jun 2006 04:29:57 +0000 (21:29 -0700)
commit984bc16cc92ea3c247bf34ad667cfb95331b9d3c
tree2342638457f43980501179056f4ba1e4e3c2c1aa
parentc749b29fae74ed59c507d84025b3298202b42609
[SECMARK]: Add secmark support to core networking.

Add a secmark field to the skbuff structure, to allow security subsystems to
place security markings on network packets.  This is similar to the nfmark
field, except is intended for implementing security policy, rather than than
networking policy.

This patch was already acked in principle by Dave Miller.

Signed-off-by: James Morris <jmorris@namei.org>
Signed-off-by: Andrew Morton <akpm@osdl.org>
Signed-off-by: David S. Miller <davem@davemloft.net>
include/linux/skbuff.h
net/Kconfig
net/core/skbuff.c
net/ipv4/ip_output.c
net/ipv4/netfilter/ipt_REJECT.c
net/ipv6/ip6_output.c