netlabel: Add configuration support for local labeling

Add the necessary NetLabel support for the new CIPSO mapping,
CIPSO_V4_MAP_LOCAL, which allows full LSM label/context support.

Signed-off-by: Paul Moore <paul.moore@hp.com>
Reviewed-by: James Morris <jmorris@namei.org>

1 files changed, 41 insertions, 0 deletions

diff --git a/net/netlabel/netlabel_cipso_v4.c b/net/netlabel/netlabel_cipso_v4.c
index db83a67cbc75..fff32b70efa9 100644
--- a/net/netlabel/netlabel_cipso_v4.c
+++ b/net/netlabel/netlabel_cipso_v4.c
@@ -365,6 +365,43 @@ add_pass_failure:
 }
 
 /**
+ * netlbl_cipsov4_add_local - Adds a CIPSO V4 DOI definition
+ * @info: the Generic NETLINK info block
+ *
+ * Description:
+ * Create a new CIPSO_V4_MAP_LOCAL DOI definition based on the given ADD
+ * message and add it to the CIPSO V4 engine.  Return zero on success and
+ * non-zero on error.
+ *
+ */
+static int netlbl_cipsov4_add_local(struct genl_info *info)
+{
+        int ret_val;
+        struct cipso_v4_doi *doi_def = NULL;
+
+        if (!info->attrs[NLBL_CIPSOV4_A_TAGLST])
+                return -EINVAL;
+
+        doi_def = kmalloc(sizeof(*doi_def), GFP_KERNEL);
+        if (doi_def == NULL)
+                return -ENOMEM;
+        doi_def->type = CIPSO_V4_MAP_LOCAL;
+
+        ret_val = netlbl_cipsov4_add_common(info, doi_def);
+        if (ret_val != 0)
+                goto add_local_failure;
+
+        ret_val = cipso_v4_doi_add(doi_def);
+        if (ret_val != 0)
+                goto add_local_failure;
+        return 0;
+
+add_local_failure:
+        cipso_v4_doi_free(doi_def);
+        return ret_val;
+}
+
+/**
  * netlbl_cipsov4_add - Handle an ADD message
  * @skb: the NETLINK buffer
  * @info: the Generic NETLINK info block
@@ -401,6 +438,10 @@ static int netlbl_cipsov4_add(struct sk_buff *skb, struct genl_info *info)
                 type_str = "pass";
                 ret_val = netlbl_cipsov4_add_pass(info);
                 break;
+        case CIPSO_V4_MAP_LOCAL:
+                type_str = "local";
+                ret_val = netlbl_cipsov4_add_local(info);
+                break;
         }
         if (ret_val == 0)
                 atomic_inc(&netlabel_mgmt_protocount);