selinux: Add plugin to install trap policies with generic labels

After establishing an IKE_SA, we check if any of its child configs
define generic SELinux labels and install trap policies for them if
necessary narrowed to the current (virtual) IPs.
This commit is contained in:
Tobias Brunner
2022-04-14 18:42:01 +02:00
parent 065685dde7
commit b00a4e778f
7 changed files with 500 additions and 0 deletions
+7
View File
@@ -726,6 +726,13 @@ if MONOLITHIC
endif
endif
if USE_SELINUX
SUBDIRS += plugins/selinux
if MONOLITHIC
libcharon_la_LIBADD += plugins/selinux/libstrongswan-selinux.la
endif
endif
if USE_ATTR_SQL
SUBDIRS += plugins/attr_sql
if MONOLITHIC