diff options
author | Casey Schaufler <casey@schaufler-ca.com> | 2024-10-09 19:32:10 +0200 |
---|---|---|
committer | Paul Moore <paul@paul-moore.com> | 2024-10-11 20:34:12 +0200 |
commit | 870b7fdc660b38c4e1bd8bf48e62aa352ddf8f42 (patch) | |
tree | 6895925c59b98edee5d7813c3ad2004507394af6 /security/integrity/ima/ima.h | |
parent | lsm: add the lsm_prop data structure (diff) | |
download | linux-870b7fdc660b38c4e1bd8bf48e62aa352ddf8f42.tar.xz linux-870b7fdc660b38c4e1bd8bf48e62aa352ddf8f42.zip |
lsm: use lsm_prop in security_audit_rule_match
Change the secid parameter of security_audit_rule_match
to a lsm_prop structure pointer. Pass the entry from the
lsm_prop structure for the approprite slot to the LSM hook.
Change the users of security_audit_rule_match to use the
lsm_prop instead of a u32. The scaffolding function lsmprop_init()
fills the structure with the value of the old secid, ensuring that
it is available to the appropriate module hook. The sources of
the secid, security_task_getsecid() and security_inode_getsecid(),
will be converted to use the lsm_prop structure later in the series.
At that point the use of lsmprop_init() is dropped.
Signed-off-by: Casey Schaufler <casey@schaufler-ca.com>
[PM: subject line tweak]
Signed-off-by: Paul Moore <paul@paul-moore.com>
Diffstat (limited to 'security/integrity/ima/ima.h')
-rw-r--r-- | security/integrity/ima/ima.h | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/security/integrity/ima/ima.h b/security/integrity/ima/ima.h index 3c323ca213d4..cdfe8c8c7bac 100644 --- a/security/integrity/ima/ima.h +++ b/security/integrity/ima/ima.h @@ -555,7 +555,7 @@ static inline void ima_filter_rule_free(void *lsmrule) { } -static inline int ima_filter_rule_match(u32 secid, u32 field, u32 op, +static inline int ima_filter_rule_match(struct lsm_prop *prop, u32 field, u32 op, void *lsmrule) { return -EINVAL; |