chiark / gitweb /
socket: introduce SELinuxLabelViaNet option
authorMichal Sekletar <msekleta@redhat.com>
Thu, 24 Jul 2014 08:40:28 +0000 (10:40 +0200)
committerMichal Sekletar <msekleta@redhat.com>
Tue, 19 Aug 2014 16:57:12 +0000 (18:57 +0200)
commitcf8bd44339b00330fdbc91041d6731ba8aba9fec
tree50131a58cdb8e65adc849c0971ff832ec208d6ec
parent6c3e68e7c1adc6176526e69769bf2eba86cdd257
socket: introduce SELinuxLabelViaNet option

This makes possible to spawn service instances triggered by socket with
MLS/MCS SELinux labels which are created based on information provided by
connected peer.

Implementation of label_get_child_label derived from xinetd.

Reviewed-by: Paul Moore <pmoore@redhat.com>
man/systemd.socket.xml
src/core/execute.c
src/core/execute.h
src/core/load-fragment-gperf.gperf.m4
src/core/socket.c
src/core/socket.h
src/shared/label.c
src/shared/label.h