SELinux: do not allocate stack space for AVC data unless needed
authorEric Paris <eparis@redhat.com>
Tue, 3 Apr 2012 16:38:00 +0000 (09:38 -0700)
committerLinus Torvalds <torvalds@linux-foundation.org>
Tue, 3 Apr 2012 16:49:41 +0000 (09:49 -0700)
commit3f0882c48286e7bdb0bbdec9c4bfa934e0db8e09
tree20a7485417c8528d975ef4ff6e90467f63f67ab2
parentf8294f1144ad0630075918df4bf94075f5384604
SELinux: do not allocate stack space for AVC data unless needed

Instead of declaring the entire selinux_audit_data on the stack when we
start an operation on declare it on the stack if we are going to use it.
We know it's usefulness at the end of the security decision and can declare
it there.

Signed-off-by: Eric Paris <eparis@redhat.com>
Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
security/selinux/avc.c
security/selinux/include/avc.h