Release 4.7 security/smack/smack_netfilter.c
/*
* Simplified MAC Kernel (smack) security module
*
* This file contains the Smack netfilter implementation
*
* Author:
* Casey Schaufler <casey@schaufler-ca.com>
*
* Copyright (C) 2014 Casey Schaufler <casey@schaufler-ca.com>
* Copyright (C) 2014 Intel Corporation.
*
* This program is free software; you can redistribute it and/or modify
* it under the terms of the GNU General Public License version 2,
* as published by the Free Software Foundation.
*/
#include <linux/netfilter_ipv4.h>
#include <linux/netfilter_ipv6.h>
#include <linux/netdevice.h>
#include <net/inet_sock.h>
#include "smack.h"
#if defined(CONFIG_IPV6) || defined(CONFIG_IPV6_MODULE)
static unsigned int smack_ipv6_output(void *priv,
struct sk_buff *skb,
const struct nf_hook_state *state)
{
struct sock *sk = skb_to_full_sk(skb);
struct socket_smack *ssp;
struct smack_known *skp;
if (sk && sk->sk_security) {
ssp = sk->sk_security;
skp = ssp->smk_out;
skb->secmark = skp->smk_secid;
}
return NF_ACCEPT;
}
Contributors
| Person | Tokens | Prop | Commits | CommitProp |
| casey schaufler | casey schaufler | 61 | 81.33% | 1 | 25.00% |
| eric dumazet | eric dumazet | 10 | 13.33% | 1 | 25.00% |
| eric w. biederman | eric w. biederman | 2 | 2.67% | 1 | 25.00% |
| david s. miller | david s. miller | 2 | 2.67% | 1 | 25.00% |
| Total | 75 | 100.00% | 4 | 100.00% |
#endif /* IPV6 */
static unsigned int smack_ipv4_output(void *priv,
struct sk_buff *skb,
const struct nf_hook_state *state)
{
struct sock *sk = skb_to_full_sk(skb);
struct socket_smack *ssp;
struct smack_known *skp;
if (sk && sk->sk_security) {
ssp = sk->sk_security;
skp = ssp->smk_out;
skb->secmark = skp->smk_secid;
}
return NF_ACCEPT;
}
Contributors
| Person | Tokens | Prop | Commits | CommitProp |
| casey schaufler | casey schaufler | 61 | 81.33% | 1 | 25.00% |
| eric dumazet | eric dumazet | 10 | 13.33% | 1 | 25.00% |
| eric w. biederman | eric w. biederman | 2 | 2.67% | 1 | 25.00% |
| david s. miller | david s. miller | 2 | 2.67% | 1 | 25.00% |
| Total | 75 | 100.00% | 4 | 100.00% |
static struct nf_hook_ops smack_nf_ops[] = {
{
.hook = smack_ipv4_output,
.pf = NFPROTO_IPV4,
.hooknum = NF_INET_LOCAL_OUT,
.priority = NF_IP_PRI_SELINUX_FIRST,
},
#if defined(CONFIG_IPV6) || defined(CONFIG_IPV6_MODULE)
{
.hook = smack_ipv6_output,
.pf = NFPROTO_IPV6,
.hooknum = NF_INET_LOCAL_OUT,
.priority = NF_IP6_PRI_SELINUX_FIRST,
},
#endif /* IPV6 */
};
static int __init smack_nf_ip_init(void)
{
int err;
if (smack_enabled == 0)
return 0;
printk(KERN_DEBUG "Smack: Registering netfilter hooks\n");
err = nf_register_hooks(smack_nf_ops, ARRAY_SIZE(smack_nf_ops));
if (err)
pr_info("Smack: nf_register_hooks: error %d\n", err);
return 0;
}
Contributors
| Person | Tokens | Prop | Commits | CommitProp |
| casey schaufler | casey schaufler | 53 | 100.00% | 1 | 100.00% |
| Total | 53 | 100.00% | 1 | 100.00% |
__initcall(smack_nf_ip_init);
Overall Contributors
| Person | Tokens | Prop | Commits | CommitProp |
| casey schaufler | casey schaufler | 274 | 89.84% | 1 | 25.00% |
| eric dumazet | eric dumazet | 23 | 7.54% | 1 | 25.00% |
| david s. miller | david s. miller | 4 | 1.31% | 1 | 25.00% |
| eric w. biederman | eric w. biederman | 4 | 1.31% | 1 | 25.00% |
| Total | 305 | 100.00% | 4 | 100.00% |
Information contained on this website is for historical information purposes only and does not indicate or represent copyright ownership.