6b6bc6205d98796361962ee282a063f18ba8dc57 - linux

commit	6b6bc6205d98796361962ee282a063f18ba8dc57	[log] [tgz]
author	Stephen Smalley <sds@tycho.nsa.gov>	Mon Mar 05 11:47:56 2018 -0500
committer	Paul Moore <paul@paul-moore.com>	Tue Mar 20 16:58:17 2018 -0400
tree	b9e6f6492606000e1d8826b4eb2c882726c61722
parent	0619f0f5e36f12e100ef294f5980cfe7c93ff23e [diff]

selinux: wrap AVC state

Wrap the AVC state within the selinux_state structure and
pass it explicitly to all AVC functions.  The AVC private state
is encapsulated in a selinux_avc structure that is referenced
from the selinux_state.

This change should have no effect on SELinux behavior or
APIs (userspace or LSM).

Signed-off-by: Stephen Smalley <sds@tycho.nsa.gov>
Reviewed-by: James Morris <james.morris@microsoft.com>
Signed-off-by: Paul Moore <paul@paul-moore.com>

security/selinux/avc.c[diff]
security/selinux/hooks.c[diff]
security/selinux/include/avc.h[diff]
security/selinux/include/avc_ss.h[diff]
security/selinux/include/security.h[diff]
security/selinux/netlabel.c[diff]
security/selinux/selinuxfs.c[diff]
security/selinux/ss/services.c[diff]
security/selinux/xfrm.c[diff]

9 files changed

tree: b9e6f6492606000e1d8826b4eb2c882726c61722