diff options
| author |   Paul Moore <paul.moore@hp.com> | 2008-01-29 08:44:18 -0500 |
|---|---|---|
| committer |   James Morris <jmorris@namei.org> | 2008-01-30 08:17:27 +1100 |
| commit | 5dbe1eb0cfc144a2b0cb1466e22bcb6fc34229a8 (patch) | |
| tree | e1e028acaf0dd08cbcacd2c125f60230f820b442 /security/selinux/include/netlabel.h | |
| parent | SELinux: Enable dynamic enable/disable of the network access checks (diff) | |
| download | wireguard-linux-5dbe1eb0cfc144a2b0cb1466e22bcb6fc34229a8.tar.xz wireguard-linux-5dbe1eb0cfc144a2b0cb1466e22bcb6fc34229a8.zip | |
SELinux: Allow NetLabel to directly cache SIDs
Now that the SELinux NetLabel "base SID" is always the netmsg initial SID we
can do a big optimization - caching the SID and not just the MLS attributes.
This not only saves a lot of per-packet memory allocations and copies but it
has a nice side effect of removing a chunk of code.
Signed-off-by: Paul Moore <paul.moore@hp.com>
Signed-off-by: James Morris <jmorris@namei.org>
Diffstat (limited to 'security/selinux/include/netlabel.h')
| -rw-r--r-- | security/selinux/include/netlabel.h | 2 |
1 files changed, 0 insertions, 2 deletions
diff --git a/security/selinux/include/netlabel.h b/security/selinux/include/netlabel.h index c8c05a6f298c..00a2809c8506 100644 --- a/security/selinux/include/netlabel.h +++ b/security/selinux/include/netlabel.h @@ -48,7 +48,6 @@ void selinux_netlbl_sk_security_clone(struct sk_security_struct *ssec, int selinux_netlbl_skbuff_getsid(struct sk_buff *skb, u16 family, - u32 base_sid, u32 *type, u32 *sid); @@ -89,7 +88,6 @@ static inline void selinux_netlbl_sk_security_clone( static inline int selinux_netlbl_skbuff_getsid(struct sk_buff *skb, u16 family, - u32 base_sid, u32 *type, u32 *sid) { |