Re: [RFC PATCH] xsm: Re-work domain_create and domain_alloc_security

2020-10-26 Thread Jason Andryuk
On Mon, Oct 26, 2020 at 12:23 PM Daniel Smith wrote: > > On Mon, 26 Oct 2020 09:46:51 -0400 Jason Andryuk > wrote > > > Untested! > > > > This only really matters for flask, but all of xsm is updated. > > > > flask_domain_create() and flask_domain_alloc_security() are a strange >

Re: [RFC PATCH] xsm: Re-work domain_create and domain_alloc_security

2020-10-26 Thread Daniel Smith
On Mon, 26 Oct 2020 09:46:51 -0400 Jason Andryuk wrote > Untested! > > This only really matters for flask, but all of xsm is updated. > > flask_domain_create() and flask_domain_alloc_security() are a strange > pair. > > flask_domain_create() serves double duty. It bo

[RFC PATCH] xsm: Re-work domain_create and domain_alloc_security

2020-10-26 Thread Jason Andryuk
Untested! This only really matters for flask, but all of xsm is updated. flask_domain_create() and flask_domain_alloc_security() are a strange pair. flask_domain_create() serves double duty. It both assigns sid and self_sid values and checks if the calling domain has permission to create the ta