linux/include/net/netfilter
James Morris 7c9728c393 [SECMARK]: Add secmark support to conntrack
Add a secmark field to IP and NF conntracks, so that security markings
on packets can be copied to their associated connections, and also
copied back to packets as required.  This is similar to the network
mark field currently used with conntrack, although it is intended for
enforcement of security policy rather than network policy.

Signed-off-by: James Morris <jmorris@namei.org>
Signed-off-by: Andrew Morton <akpm@osdl.org>
Signed-off-by: David S. Miller <davem@davemloft.net>
2006-06-17 21:30:01 -07:00
..
ipv4 [NETFILTER] x_tables: Abstraction layer for {ip,ip6,arp}_tables 2006-01-12 14:06:43 -08:00
ipv6 [NETFILTER]: Add nf_conntrack subsystem. 2005-11-09 16:38:16 -08:00
nf_conntrack_compat.h [SECMARK]: Add secmark support to conntrack 2006-06-17 21:30:01 -07:00
nf_conntrack_core.h [NETFILTER]: Add nf_conntrack subsystem. 2005-11-09 16:38:16 -08:00
nf_conntrack_helper.h [NETFILTER]: Add ctnetlink port for nf_conntrack 2006-01-05 12:19:05 -08:00
nf_conntrack_l3proto.h [NETFILTER]: nf_conntrack: check address family when finding protocol module 2006-02-04 23:51:17 -08:00
nf_conntrack_protocol.h [NETFILTER]: Add ctnetlink port for nf_conntrack 2006-01-05 12:19:05 -08:00
nf_conntrack_tuple.h [NET]: Use NIP6_FMT in kernel.h 2006-01-13 14:29:07 -08:00
nf_conntrack.h [SECMARK]: Add secmark support to conntrack 2006-06-17 21:30:01 -07:00