hollalinux
/
linux-sg2042
mirror of https://github.com/sophgo/linux-riscv.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

selinux: Consolidate sockcreate_sid logic 

Consolidate the basic sockcreate_sid logic into a single helper function
which allows us to do some cleanups in the related code.

Signed-off-by: Paul Moore <paul.moore@hp.com>
Acked-by: Eric Paris <eparis@redhat.com>
Signed-off-by: James Morris <jmorris@namei.org>
This commit is contained in:
Paul Moore 2010-04-22 14:46:18 -04:00 committed by James Morris
parent 4d1e24514d
commit d4f2d97841
1 changed files with 12 additions and 20 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

32
security/selinux/hooks.c
View File

@ -3671,6 +3671,12 @@ static int selinux_skb_peerlbl_sid(struct sk_buff *skb, u16 family, u32 *sid)
} }
/* socket security operations */ /* socket security operations */
static u32 socket_sockcreate_sid(const struct task_security_struct *tsec)
{
return tsec->sockcreate_sid ? : tsec->sid;
}
static int socket_has_perm(struct task_struct *task, struct socket *sock, static int socket_has_perm(struct task_struct *task, struct socket *sock,
u32 perms) u32 perms)
{ {
@ -3698,21 +3704,15 @@ static int selinux_socket_create(int family, int type,
{ {
const struct cred *cred = current_cred(); const struct cred *cred = current_cred();
const struct task_security_struct *tsec = cred->security; const struct task_security_struct *tsec = cred->security;
u32 sid, newsid; u32 newsid;
u16 secclass; u16 secclass;
int err = 0;
if (kern) if (kern)
goto out; return 0;
sid = tsec->sid;
newsid = tsec->sockcreate_sid ?: sid;
newsid = socket_sockcreate_sid(tsec);
secclass = socket_type_to_security_class(family, type, protocol); secclass = socket_type_to_security_class(family, type, protocol);
err = avc_has_perm(sid, newsid, secclass, SOCKET__CREATE, NULL); return avc_has_perm(tsec->sid, newsid, secclass, SOCKET__CREATE, NULL);
out:
return err;
} }
static int selinux_socket_post_create(struct socket *sock, int family, static int selinux_socket_post_create(struct socket *sock, int family,
@ -3720,22 +3720,14 @@ static int selinux_socket_post_create(struct socket *sock, int family,
{ {
const struct cred *cred = current_cred(); const struct cred *cred = current_cred();
const struct task_security_struct *tsec = cred->security; const struct task_security_struct *tsec = cred->security;
struct inode_security_struct *isec; struct inode_security_struct *isec = SOCK_INODE(sock)->i_security;
struct sk_security_struct *sksec; struct sk_security_struct *sksec;
u32 sid, newsid;
int err = 0; int err = 0;
sid = tsec->sid;
newsid = tsec->sockcreate_sid;
isec = SOCK_INODE(sock)->i_security;
if (kern) if (kern)
isec->sid = SECINITSID_KERNEL; isec->sid = SECINITSID_KERNEL;
else if (newsid)
isec->sid = newsid;
else else
isec->sid = sid; isec->sid = socket_sockcreate_sid(tsec);
isec->sclass = socket_type_to_security_class(family, type, protocol); isec->sclass = socket_type_to_security_class(family, type, protocol);
isec->initialized = 1; isec->initialized = 1;