]> git.ipfire.org Git - thirdparty/strongswan.git/commit
selinux: Add plugin to install trap policies with generic labels
authorTobias Brunner <tobias@strongswan.org>
Wed, 2 Feb 2022 14:51:06 +0000 (15:51 +0100)
committerTobias Brunner <tobias@strongswan.org>
Thu, 14 Apr 2022 16:42:01 +0000 (18:42 +0200)
commitb00a4e778f9e9afe3d3bfbb1daa3463096d4c50f
tree7ba608ed1ccfaa4a3e75af12bdf37d2ca0bbd5b4
parent065685dde710e55e1f713dff7f0d61064391c442
selinux: Add plugin to install trap policies with generic labels

After establishing an IKE_SA, we check if any of its child configs
define generic SELinux labels and install trap policies for them if
necessary narrowed to the current (virtual) IPs.
configure.ac
src/libcharon/Makefile.am
src/libcharon/plugins/selinux/Makefile.am [new file with mode: 0644]
src/libcharon/plugins/selinux/selinux_listener.c [new file with mode: 0644]
src/libcharon/plugins/selinux/selinux_listener.h [new file with mode: 0644]
src/libcharon/plugins/selinux/selinux_plugin.c [new file with mode: 0644]
src/libcharon/plugins/selinux/selinux_plugin.h [new file with mode: 0644]