NetLabel: SELinux cleanups
authorPaul Moore <paul.moore@hp.com>
Fri, 17 Nov 2006 22:38:53 +0000 (17:38 -0500)
committerDavid S. Miller <davem@sunset.davemloft.net>
Sun, 3 Dec 2006 05:24:13 +0000 (21:24 -0800)
commit9f2ad66509b182b399a5b03de487f45bde623524
tree8376dc2db99a78c1b043644f019c4dc224187f16
parent9bb5fd2b05cb4dba229e225536faa59eaadd837d
NetLabel: SELinux cleanups

This patch does a lot of cleanup in the SELinux NetLabel support code.  A
summary of the changes include:

* Use RCU locking for the NetLabel state variable in the skk_security_struct
  instead of using the inode_security_struct mutex.
* Remove unnecessary parameters in selinux_netlbl_socket_post_create().
* Rename selinux_netlbl_sk_clone_security() to
  selinux_netlbl_sk_security_clone() to better fit the other NetLabel
  sk_security functions.
* Improvements to selinux_netlbl_inode_permission() to help reduce the cost of
  the common case.

Signed-off-by: Paul Moore <paul.moore@hp.com>
Signed-off-by: James Morris <jmorris@namei.org>
security/selinux/hooks.c
security/selinux/include/objsec.h
security/selinux/include/selinux_netlabel.h
security/selinux/ss/services.c