James Morris <[EMAIL PROTECTED]> wrote on 06/27/2006 09:33:17 PM:
> On Tue, 27 Jun 2006, Catherine Zhang wrote:
>
> > diff -puN security/selinux/exports.c~lsm-secpeer-unix
> security/selinux/exports.c
> > --- linux-2.6.17-rc6-mm2-JM/security/selinux/exports.c~lsm-
> secpeer-unix 2006-06-27 18:15:10.914669944 -0400
> > +++ linux-2.6.17-rc6-mm2-JM-cxzhang/security/selinux/exports.c
> 2006-06-27 18:16:31.502418744 -0400
> > @@ -17,6 +17,7 @@
> > #include <linux/selinux.h>
> > #include <linux/fs.h>
> > #include <linux/ipc.h>
> > +#include <net/sock.h>
> >
> > #include "security.h"
> > #include "objsec.h"
> > @@ -72,6 +73,16 @@ void selinux_get_task_sid(struct task_st
> > *sid = 0;
> > }
> >
> > +void selinux_get_sock_sid(struct socket *sock, u32 *sid)
> > +{
> > + if (selinux_enabled) {
> > + const struct inode *inode = SOCK_INODE(sock);
> > + selinux_get_inode_sid(inode, sid);
> > + return;
> > + }
> > + *sid = 0;
> > +}
> > +
>
>
> Just one more thing, we don't need to export this function now.
You mean moving it to security/selinux/hooks.c and making it static?
I think conceptually this is where it should reside -- auditing system
might need it in the future, for example.
thanks,
Catherine
-
To unsubscribe from this list: send the line "unsubscribe netdev" in
the body of a message to [EMAIL PROTECTED]
More majordomo info at http://vger.kernel.org/majordomo-info.html
