selinux: wrap selinuxfs state

Browse source

Move global selinuxfs state to a per-instance structure (selinux_fs_info),
and include a pointer to the selinux_state in this structure.
Pass this selinux_state to all security server operations, thereby
ensuring that each selinuxfs instance presents a view of and acts
as an interface to a particular selinux_state instance.

This change should have no effect on SELinux behavior or APIs
(userspace or LSM).  It merely wraps the selinuxfs global state,
links it to a particular selinux_state (currently always the single
global selinux_state) and uses that state for all operations.

Signed-off-by: Stephen Smalley <sds@tycho.nsa.gov>
Signed-off-by: Paul Moore <paul@paul-moore.com>

...

This commit is contained in:

Stephen Smalley 2018-03-20 11:59:11 -04:00 committed by Paul Moore

parent 274f62e1e5

commit 0619f0f5e3

1 changed files with 261 additions and 177 deletions

Show all changes Ignore whitespace when comparing lines Ignore changes in amount of whitespace Ignore changes in whitespace at EOL

repo.diff.show_diff_stats Download patch file Download diff file Expand all files Collapse all files

438

security/selinux/selinuxfs.c

View file

File diff suppressed because it is too large Load diff