acrn-kernel/security/selinux
Paul Moore ba6ff9f2b5 [NetLabel]: consolidate the struct socket/sock handling to just struct sock
The current NetLabel code has some redundant APIs which allow both
"struct socket" and "struct sock" types to be used; this may have made
sense at some point but it is wasteful now.  Remove the functions that
operate on sockets and convert the callers.  Not only does this make
the code smaller and more consistent but it pushes the locking burden
up to the caller which can be more intelligent about the locks.  Also,
perform the same conversion (socket to sock) on the SELinux/NetLabel
glue code where it make sense.

Signed-off-by: Paul Moore <paul.moore@hp.com>
Acked-by: James Morris <jmorris@namei.org>
Signed-off-by: David S. Miller <davem@davemloft.net>
2007-06-08 13:33:09 -07:00
..
include selinux: export initial SID contexts via selinuxfs 2007-04-26 01:36:00 -04:00
ss selinux: preserve boolean values across policy reloads 2007-04-26 01:36:13 -04:00
Kconfig Fix trivial typos in Kconfig* files 2007-05-09 07:12:20 +02:00
Makefile SELinux: extract the NetLabel SELinux support from the security server 2007-04-26 01:35:48 -04:00
avc.c selinux: remove userland security class and permission definitions 2007-04-26 01:35:58 -04:00
exports.c
hooks.c header cleaning: don't include smp_lock.h when not used 2007-05-08 11:15:07 -07:00
netif.c
netlabel.c [NetLabel]: consolidate the struct socket/sock handling to just struct sock 2007-06-08 13:33:09 -07:00
netlink.c [NETLINK]: Switch cb_lock spinlock to mutex and allow to override it 2007-04-25 22:29:03 -07:00
nlmsgtab.c
selinuxfs.c selinux: change numbering of boolean directory inodes in selinuxfs 2007-04-26 01:36:11 -04:00
xfrm.c