mirror of
https://github.com/BobTheBlinker/android_kernel_motorola_sm6375.git
synced 2026-10-29 03:01:39 -04:00
secmark: make secmark object handling generic
Right now secmark has lots of direct selinux calls. Use all LSM calls and remove all SELinux specific knowledge. The only SELinux specific knowledge we leave is the mode. The only point is to make sure that other LSMs at least test this generic code before they assume it works. (They may also have to make changes if they do not represent labels as strings) Signed-off-by: Eric Paris <[email protected]> Acked-by: Paul Moore <[email protected]> Acked-by: Patrick McHardy <[email protected]> Signed-off-by: James Morris <[email protected]>
This commit is contained in:
parent
15714f7b58
commit
2606fd1fa5
10 changed files with 104 additions and 141 deletions
|
|
@ -1136,6 +1136,24 @@ void security_inet_conn_established(struct sock *sk,
|
|||
security_ops->inet_conn_established(sk, skb);
|
||||
}
|
||||
|
||||
int security_secmark_relabel_packet(u32 secid)
|
||||
{
|
||||
return security_ops->secmark_relabel_packet(secid);
|
||||
}
|
||||
EXPORT_SYMBOL(security_secmark_relabel_packet);
|
||||
|
||||
void security_secmark_refcount_inc(void)
|
||||
{
|
||||
security_ops->secmark_refcount_inc();
|
||||
}
|
||||
EXPORT_SYMBOL(security_secmark_refcount_inc);
|
||||
|
||||
void security_secmark_refcount_dec(void)
|
||||
{
|
||||
security_ops->secmark_refcount_dec();
|
||||
}
|
||||
EXPORT_SYMBOL(security_secmark_refcount_dec);
|
||||
|
||||
int security_tun_dev_create(void)
|
||||
{
|
||||
return security_ops->tun_dev_create();
|
||||
|
|
|
|||
Loading…
Reference in a new issue