James Morris 560ee653b6 netfilter: ip_tables: add iptables security table for mandatory access control rules ... The following patch implements a new "security" table for iptables, so that MAC (SELinux etc.) networking rules can be managed separately to standard DAC rules. This is to help with distro integration of the new secmark-based network controls, per various previous discussions. The need for a separate table arises from the fact that existing tools and usage of iptables will likely clash with centralized MAC policy management. The SECMARK and CONNSECMARK targets will still be valid in the mangle table to prevent breakage of existing users. Signed-off-by: James Morris <jmorris@namei.org> Signed-off-by: Patrick McHardy <kaber@trash.net> Signed-off-by: David S. Miller <davem@davemloft.net>		2008-06-09 15:57:24 -07:00
..
core.h	[SOCK][NETNS]: Add the percpu prot_inuse counter in the struct net.	2008-03-31 19:42:16 -07:00
dccp.h	[NETNS][DCCPV6]: Move the dccp_v6_ctl_sk on the struct net.	2008-04-13 22:32:25 -07:00
generic.h	[NETNS]: The generic per-net pointers.	2008-04-15 00:36:08 -07:00
ipv4.h	netfilter: ip_tables: add iptables security table for mandatory access control rules	2008-06-09 15:57:24 -07:00
ipv6.h	[NETNS][IPV6] mcast - handle several network namespace	2008-03-07 11:16:55 -08:00
packet.h	[NETNS]: separate af_packet netns data	2008-01-28 14:57:15 -08:00
unix.h	[NETNS]: struct net content re-work (v3)	2008-01-28 14:57:14 -08:00
x_tables.h	[NETFILTER]: x_tables: per-netns xt_tables	2008-01-31 19:27:35 -08:00