SELinux: Add network port SID cache
authorPaul Moore <paul.moore@hp.com>
Thu, 10 Apr 2008 14:48:14 +0000 (10:48 -0400)
committerJames Morris <jmorris@namei.org>
Fri, 18 Apr 2008 10:26:16 +0000 (20:26 +1000)
commit3e11217263d0521e212cb8a017fbc2a1514db78f
treed3b399c3d907cd90afd27003000fd9d99212f44b
parent832cbd9aa1293cba57d06571f5fc8f0917c672af
SELinux: Add network port SID cache

Much like we added a network node cache, this patch adds a network port
cache. The design is taken almost completely from the network node cache
which in turn was taken from the network interface cache.  The basic idea is
to cache entries in a hash table based on protocol/port information.  The
hash function only takes the port number into account since the number of
different protocols in use at any one time is expected to be relatively
small.

Signed-off-by: Paul Moore <paul.moore@hp.com>
Acked-by: Stephen Smalley <sds@tycho.nsa.gov>
Signed-off-by: James Morris <jmorris@namei.org>
security/selinux/Makefile
security/selinux/hooks.c
security/selinux/include/objsec.h
security/selinux/include/security.h
security/selinux/ss/services.c