linux-toradex.git/security/selinux/include, branch v3.4.55

SELinux: do not allocate stack space for AVC data unless needed

2012-04-03T16:49:41+00:00

Instead of declaring the entire selinux_audit_data on the stack when we
start an operation on declare it on the stack if we are going to use it.
We know it's usefulness at the end of the security decision and can declare
it there.

Signed-off-by: Eric Paris 
Signed-off-by: Linus Torvalds

SELinux: remove avd from selinux_audit_data

2012-04-03T16:49:10+00:00

We do not use it.  Remove it.

Signed-off-by: Eric Paris 
Signed-off-by: Linus Torvalds

LSM: shrink sizeof LSM specific portion of common_audit_data

2012-04-03T16:48:40+00:00

Linus found that the gigantic size of the common audit data caused a big
perf hit on something as simple as running stat() in a loop.  This patch
requires LSMs to declare the LSM specific portion separately rather than
doing it in a union.  Thus each LSM can be responsible for shrinking their
portion and don't have to pay a penalty just because other LSMs have a
bigger space requirement.

Signed-off-by: Eric Paris 
Signed-off-by: Linus Torvalds

Remove all #inclusions of asm/system.h

2012-03-28T17:30:03+00:00

Remove all #inclusions of asm/system.h preparatory to splitting and killing
it.  Performed with the following command:

perl -p -i -e 's!^#\s*include\s*.*\n!!' `grep -Irl '^#\s*include\s*' *`

Signed-off-by: David Howells

SELinux: selinux/xfrm.h needs net/flow.h

2012-03-26T15:38:47+00:00

selinux/xfrm.h needs to #include net/flow.h or else suffer:

In file included from security/selinux/ss/services.c:69:0:
security/selinux/include/xfrm.h: In function 'selinux_xfrm_notify_policyload':
security/selinux/include/xfrm.h:53:14: error: 'flow_cache_genid' undeclared (first use in this function)
security/selinux/include/xfrm.h:53:14: note: each undeclared identifier is reported only once for each function it appears in

Signed-off-by: David Howells

selinux: sparse fix: fix several warnings in the security server code

2011-09-09T23:56:32+00:00

Fix several sparse warnings in the SELinux security server code.

Signed-off-by: James Morris

selinux: sparse fix: fix warnings in netlink code

2011-09-09T23:56:31+00:00

Fix sparse warnings in SELinux Netlink code.

Signed-off-by: James Morris

selinux: sparse fix: eliminate warnings for selinuxfs

2011-09-09T23:56:30+00:00

Fixes several sparse warnings for selinuxfs.c

Signed-off-by: James Morris

selinux: sparse fix: declare selinux_disable() in security.h

2011-09-09T23:56:26+00:00

Sparse fix: declare selinux_disable() in security.h

Signed-off-by: James Morris

selinux: sparse fix: move selinux_complete_init

2011-09-09T23:56:26+00:00

Sparse fix: move selinux_complete_init

Signed-off-by: James Morris