]> www.infradead.org Git - users/dwmw2/linux.git/commit
audit: maintain an lsm_prop in audit_context
authorCasey Schaufler <casey@schaufler-ca.com>
Wed, 9 Oct 2024 17:32:12 +0000 (10:32 -0700)
committerPaul Moore <paul@paul-moore.com>
Fri, 11 Oct 2024 18:34:13 +0000 (14:34 -0400)
commit7183abccd8ac2c486363e267b5d84032818eb725
tree1b68bbb04a93a257085dda538edfcbfaf435ac6f
parent6f2f724f0e116d9ea960ff3dd645add12e60e176
audit: maintain an lsm_prop in audit_context

Replace the secid value stored in struct audit_context with a struct
lsm_prop. Change the code that uses this value to accommodate the
change. security_audit_rule_match() expects a lsm_prop, so existing
scaffolding can be removed. A call to security_secid_to_secctx()
is changed to security_lsmprop_to_secctx().  The call to
security_ipc_getsecid() is scaffolded.

A new function lsmprop_is_set() is introduced to identify whether
an lsm_prop contains a non-zero value.

Signed-off-by: Casey Schaufler <casey@schaufler-ca.com>
[PM: subject line tweak, fix lsmprop_is_set() typo]
Signed-off-by: Paul Moore <paul@paul-moore.com>
include/linux/security.h
kernel/audit.h
kernel/auditsc.c