[netlabel/netlabel_tools] bdcefa: netlabelctl: Add support for specifying address fa...

3 views
Skip to first unread message

GitHub

unread,
Mar 7, 2016, 4:04:16 PM3/7/16
to netl...@googlegroups.com
Branch: refs/heads/working-calipso-v2
Home: https://github.com/netlabel/netlabel_tools
Commit: bdcefa6b7894d8a86acaa863f445b5f8ab47c02c
https://github.com/netlabel/netlabel_tools/commit/bdcefa6b7894d8a86acaa863f445b5f8ab47c02c
Author: Huw Davies <h...@codeweavers.com>
Date: 2016-03-07 (Mon, 07 Mar 2016)

Changed paths:
M doc/man/man8/netlabelctl.8
M include/libnetlabel.h
M include/netlabel.h
M libnetlabel/mod_mgmt.c
M netlabelctl/map.c

Log Message:
-----------
netlabelctl: Add support for specifying address families.

The main user-visible change is to the map add command where
one can specify a '4' or a '6' as an optional protocol extra
value for the unlabelled protocol. eg:
netlabelctl map add domain:foo_t protocol:unlbl,4
will map IPv4 addresses on domain foo_t to the unlabelled protocol.
Omitting the extra value will map all address families to that
protocol.

A similar notation is used when listing maps. Domains displayed
as:
domain:"foo_t",UNLABELED
have the mapping applied across all address families, while domains
displayed as:
domain:"foo2_t",UNLABELED,4
would have the mapping for just IPv4.

Signed-off-by: Huw Davies <h...@codeweavers.com>
Signed-off-by: Paul Moore <pa...@paul-moore.com>


Commit: d2e986f028e9005516a8f9b80d27b39dc86b6743
https://github.com/netlabel/netlabel_tools/commit/d2e986f028e9005516a8f9b80d27b39dc86b6743
Author: Huw Davies <h...@codeweavers.com>
Date: 2016-03-07 (Mon, 07 Mar 2016)

Changed paths:
M doc/man/man8/netlabelctl.8
M include/libnetlabel.h
M include/netlabel.h
M libnetlabel/Makefile.am
A libnetlabel/mod_calipso.c
A libnetlabel/mod_calipso.h
M libnetlabel/mod_mgmt.c
M libnetlabel/netlabel_init.c
M netlabelctl/Makefile.am
A netlabelctl/calipso.c
M netlabelctl/main.c
M netlabelctl/map.c
M netlabelctl/mgmt.c
M netlabelctl/netlabelctl.h

Log Message:
-----------
netlabelctl: Add CALIPSO support.

This is a direct copy of the CISPO support. The only differences are
the removal of local and trans modes, and the removal of tags.

Signed-off-by: Huw Davies <h...@codeweavers.com>
Signed-off-by: Paul Moore <pa...@paul-moore.com>


Commit: 7fd501687117503cc1cf03b1f1eeb2c7bb278522
https://github.com/netlabel/netlabel_tools/commit/7fd501687117503cc1cf03b1f1eeb2c7bb278522
Author: Huw Davies <h...@codeweavers.com>
Date: 2016-03-07 (Mon, 07 Mar 2016)

Changed paths:
M netlabelctl/netlabel-config

Log Message:
-----------
netlabel-config: Extend the reset function to remove any CALIPSO DOIs.

Signed-off-by: Huw Davies <h...@codeweavers.com>
Signed-off-by: Paul Moore <pa...@paul-moore.com>


Compare: https://github.com/netlabel/netlabel_tools/compare/bdcefa6b7894^...7fd501687117
Reply all
Reply to author
Forward
0 new messages