summaryrefslogtreecommitdiffstats
path: root/net/ipv6/Makefile
diff options
context:
space:
mode:
authorHuw Davies2016-06-27 21:02:46 +0200
committerPaul Moore2016-06-27 21:02:46 +0200
commitcb72d38211eacda2dd90b09540542b6582da614e (patch)
tree2a9be751e1917ede6f9a56f547eafacfa202d1e7 /net/ipv6/Makefile
parentnetlabel: Add an address family to domain hash entries. (diff)
downloadkernel-qcow2-linux-cb72d38211eacda2dd90b09540542b6582da614e.tar.gz
kernel-qcow2-linux-cb72d38211eacda2dd90b09540542b6582da614e.tar.xz
kernel-qcow2-linux-cb72d38211eacda2dd90b09540542b6582da614e.zip
netlabel: Initial support for the CALIPSO netlink protocol.
CALIPSO is a packet labelling protocol for IPv6 which is very similar to CIPSO. It is specified in RFC 5570. Much of the code is based on the current CIPSO code. This adds support for adding passthrough-type CALIPSO DOIs through the NLBL_CALIPSO_C_ADD command. It requires attributes: NLBL_CALIPSO_A_TYPE which must be CALIPSO_MAP_PASS. NLBL_CALIPSO_A_DOI. In passthrough mode the CALIPSO engine will map MLS secattr levels and categories directly to the packet label. At this stage, the major difference between this and the CIPSO code is that IPv6 may be compiled as a module. To allow for this the CALIPSO functions are registered at module init time. Signed-off-by: Huw Davies <huw@codeweavers.com> Signed-off-by: Paul Moore <paul@paul-moore.com>
Diffstat (limited to 'net/ipv6/Makefile')
-rw-r--r--net/ipv6/Makefile1
1 files changed, 1 insertions, 0 deletions
diff --git a/net/ipv6/Makefile b/net/ipv6/Makefile
index 2fbd90bf8d33..88ad4477705c 100644
--- a/net/ipv6/Makefile
+++ b/net/ipv6/Makefile
@@ -21,6 +21,7 @@ ipv6-$(CONFIG_NETFILTER) += netfilter.o
ipv6-$(CONFIG_IPV6_MULTIPLE_TABLES) += fib6_rules.o
ipv6-$(CONFIG_PROC_FS) += proc.o
ipv6-$(CONFIG_SYN_COOKIES) += syncookies.o
+ipv6-$(CONFIG_NETLABEL) += calipso.o
ipv6-objs += $(ipv6-y)