Re: [PATCH v15 15/23] LSM: Use lsmcontext in security_secid_to_secctx

Paul Moore
2020-03-07T02:01:46Z

On Fri, Feb 21, 2020 at 7:06 PM Casey Schaufler <casey@schaufler-ca.com> wrote:
>
> Replace the (secctx,seclen) pointer pair with a single
> lsmcontext pointer to allow return of the LSM identifier
> along with the context and context length. This allows
> security_release_secctx() to know how to release the
> context. Callers have been modified to use or save the
> returned data from the new structure.
>
> Acked-by: Stephen Smalley <sds@tycho.nsa.gov>
> Signed-off-by: Casey Schaufler <casey@schaufler-ca.com>
> Cc: netdev@vger.kernel.org
> ---
> drivers/android/binder.c | 26 +++++++---------
> include/linux/security.h | 4 +--
> include/net/scm.h | 10 ++-----
> kernel/audit.c | 35 ++++++++--------------
> kernel/auditsc.c | 31 +++++++------------
> net/ipv4/ip_sockglue.c | 7 ++---
> net/netfilter/nf_conntrack_netlink.c | 14 +++++----
> net/netfilter/nf_conntrack_standalone.c | 7 ++---
> net/netfilter/nfnetlink_queue.c | 5 +++-
> net/netlabel/netlabel_unlabeled.c | 40 ++++++++-----------------
> net/netlabel/netlabel_user.c | 7 ++---
> security/security.c | 10 +++++--
> 12 files changed, 76 insertions(+), 120 deletions(-)

Acked-by: Paul Moore <paul@paul-moore.com>

--
paul moore