Venkat Yekkirala 334c85569b [SELINUX]: increment flow cache genid ... Currently, old flow cache entries remain valid even after a reload of SELinux policy. This patch increments the flow cache generation id on policy (re)loads so that flow cache entries are revalidated as needed. Thanks to Herbet Xu for pointing this out. See: http://marc.theaimsgroup.com/?l=linux-netdev&m=116841378704536&w=2 There's also a general issue as well as a solution proposed by David Miller for when flow_cache_genid wraps. I might be submitting a separate patch for that later. I request that this be applied to 2.6.20 since it's a security relevant fix. Signed-off-by: Venkat Yekkirala <vyekkirala@TrustedCS.com> Signed-off-by: David S. Miller <davem@davemloft.net>		2007-01-23 20:25:41 -08:00
..
include	[PATCH] selinux endianness annotations	2006-12-04 19:32:44 -08:00
ss	[SELINUX]: increment flow cache genid	2007-01-23 20:25:41 -08:00
Kconfig	Still more typo fixes	2006-10-03 22:36:44 +02:00
Makefile	[PATCH] support for context based audit filtering	2006-05-01 06:06:24 -04:00
avc.c	[PATCH] slab: remove kmem_cache_t	2006-12-07 08:39:25 -08:00
exports.c	[PATCH] selinux: rename selinux_ctxid_to_string	2006-09-26 08:48:52 -07:00
hooks.c	[PATCH] fdtable: Make fdarray and fdsets equal in size	2006-12-10 09:57:22 -08:00
netif.c	[PATCH] SELinux: convert to kzalloc	2005-10-30 17:37:11 -08:00
netlink.c	[NETLINK]: Add "groups" argument to netlink_kernel_create	2005-08-29 16:01:11 -07:00
nlmsgtab.c	[IPv6] prefix: Convert RTM_NEWPREFIX notifications to use the new netlink api	2006-12-02 21:22:45 -08:00
selinuxfs.c	[PATCH] struct path: convert selinux	2006-12-08 08:28:49 -08:00
xfrm.c	SELinux: peer secid consolidation for external network labeling	2006-12-02 21:24:14 -08:00