224dfbd81e
This patch adds a SELinux IP address/node SID caching mechanism similar to the sel_netif_*() functions. The node SID queries in the SELinux hooks files are also modified to take advantage of this new functionality. In addition, remove the address length information from the sk_buff parsing routines as it is redundant since we already have the address family. Signed-off-by: Paul Moore <paul.moore@hp.com> Signed-off-by: James Morris <jmorris@namei.org>
22 lines
407 B
Makefile
22 lines
407 B
Makefile
#
|
|
# Makefile for building the SELinux module as part of the kernel tree.
|
|
#
|
|
|
|
obj-$(CONFIG_SECURITY_SELINUX) := selinux.o ss/
|
|
|
|
selinux-y := avc.o \
|
|
hooks.o \
|
|
selinuxfs.o \
|
|
netlink.o \
|
|
nlmsgtab.o \
|
|
netif.o \
|
|
netnode.o \
|
|
exports.o
|
|
|
|
selinux-$(CONFIG_SECURITY_NETWORK_XFRM) += xfrm.o
|
|
|
|
selinux-$(CONFIG_NETLABEL) += netlabel.o
|
|
|
|
EXTRA_CFLAGS += -Isecurity/selinux/include
|
|
|