diff options
| author |   Ahmed S. Darwish <darwish.07@gmail.com> | 2008-03-01 21:54:38 +0200 |
|---|---|---|
| committer |   James Morris <jmorris@namei.org> | 2008-04-19 09:52:34 +1000 |
| commit | 2a862b32f3da5a2120043921ad301322ad526084 (patch) | |
| tree | bb97054b2f648504f670e3eaed2626b547c4d081 /net | |
| parent | SELinux: setup new inode/ipc getsecid hooks (diff) | |
| download | linux-dev-2a862b32f3da5a2120043921ad301322ad526084.tar.xz linux-dev-2a862b32f3da5a2120043921ad301322ad526084.zip | |
Audit: use new LSM hooks instead of SELinux exports
Stop using the following exported SELinux interfaces:
selinux_get_inode_sid(inode, sid)
selinux_get_ipc_sid(ipcp, sid)
selinux_get_task_sid(tsk, sid)
selinux_sid_to_string(sid, ctx, len)
kfree(ctx)
and use following generic LSM equivalents respectively:
security_inode_getsecid(inode, secid)
security_ipc_getsecid*(ipcp, secid)
security_task_getsecid(tsk, secid)
security_sid_to_secctx(sid, ctx, len)
security_release_secctx(ctx, len)
Call security_release_secctx only if security_secid_to_secctx
succeeded.
Signed-off-by: Casey Schaufler <casey@schaufler-ca.com>
Signed-off-by: Ahmed S. Darwish <darwish.07@gmail.com>
Acked-by: James Morris <jmorris@namei.org>
Reviewed-by: Paul Moore <paul.moore@hp.com>
Diffstat (limited to 'net')
0 files changed, 0 insertions, 0 deletions