diff options
| author |   Casey Schaufler <casey@schaufler-ca.com> | 2018-09-21 17:19:45 -0700 |
|---|---|---|
| committer |   Kees Cook <keescook@chromium.org> | 2019-01-08 13:18:45 -0800 |
| commit | 7c6538280ae99eaebd589a5c029e1ed1c063909c (patch) | |
| tree | dc9151bdc921bb93a0a3be3e06a4e93f570e44c5 /security/selinux/include/objsec.h | |
| parent | LSM: Infrastructure management of the task security (diff) | |
| download | linux-dev-7c6538280ae99eaebd589a5c029e1ed1c063909c.tar.xz linux-dev-7c6538280ae99eaebd589a5c029e1ed1c063909c.zip | |
SELinux: Abstract use of ipc security blobs
Don't use the ipc->security pointer directly.
Don't use the msg_msg->security pointer directly.
Provide helper functions that provides the security blob pointers.
Signed-off-by: Casey Schaufler <casey@schaufler-ca.com>
Reviewed-by: Kees Cook <keescook@chromium.org>
Signed-off-by: Kees Cook <keescook@chromium.org>
Diffstat (limited to '')
| -rw-r--r-- | security/selinux/include/objsec.h | 13 |
1 files changed, 13 insertions, 0 deletions
diff --git a/security/selinux/include/objsec.h b/security/selinux/include/objsec.h index 562fad58c56b..539cacf4a572 100644 --- a/security/selinux/include/objsec.h +++ b/security/selinux/include/objsec.h @@ -26,6 +26,7 @@ #include <linux/in.h> #include <linux/spinlock.h> #include <linux/lsm_hooks.h> +#include <linux/msg.h> #include <net/net_namespace.h> #include "flask.h" #include "avc.h" @@ -175,4 +176,16 @@ static inline struct inode_security_struct *selinux_inode( return inode->i_security + selinux_blob_sizes.lbs_inode; } +static inline struct msg_security_struct *selinux_msg_msg( + const struct msg_msg *msg_msg) +{ + return msg_msg->security; +} + +static inline struct ipc_security_struct *selinux_ipc( + const struct kern_ipc_perm *ipc) +{ + return ipc->security; +} + #endif /* _SELINUX_OBJSEC_H_ */ |