Re: [PATCH kernel/tegra] enable secmark labeling for SE Android network access controls

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Joshua Brindle wrote:
Stephen Smalley wrote:
On Sat, 2012-06-16 at 14:56 -0400, Joshua Brindle wrote:
Signed-off-by: Joshua Brindle<jbrindle@xxxxxxxxxx>
---
arch/arm/configs/stingray_defconfig | 4 ++++
1 file changed, 4 insertions(+)

diff --git a/arch/arm/configs/stingray_defconfig
b/arch/arm/configs/stingray_defconfig
index e67e4d5..9fe1fdd 100644
--- a/arch/arm/configs/stingray_defconfig
+++ b/arch/arm/configs/stingray_defconfig
@@ -459,3 +459,7 @@ CONFIG_SECURITY=y
CONFIG_LSM_MMAP_MIN_ADDR=4096
CONFIG_SECURITY_NETWORK=y
CONFIG_SECURITY_SELINUX=y
+CONFIG_NETWORK_SECMARK=y
+CONFIG_NF_CONNTRACK_SECMARK=y
+CONFIG_NETFILTER_XT_TARGET_CONNSECMARK=y
+CONFIG_NETFILTER_XT_TARGET_SECMARK=y

Thanks, merged.

No samsung kernel patch?


We are only using AOSP devices, Galaxy Nexus is Omap and Xoom is Tegra. I'll add
the secmark configs to the other kernels but I have no way of testing them.


And I forgot that the Nexus S uses the Samsung kernel. I still don't have one but I'll do the patch and let you test on yours :)

--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@xxxxxxxxxxxxx with
the words "unsubscribe selinux" without quotes as the message.


[Index of Archives]     [Selinux Refpolicy]     [Linux SGX]     [Fedora Users]     [Fedora Desktop]     [Yosemite Photos]     [Yosemite Camping]     [Yosemite Campsites]     [KDE Users]     [Gnome Users]

  Powered by Linux