mirror of
https://mirrors.bfsu.edu.cn/git/linux.git
synced 2024-11-20 10:44:23 +08:00
1b50eed9ca
Previously, we were gathering the context instead of the sid. Now in this patch, we gather just the sid and convert to context only if an audit event is being output. This patch brings the performance hit from 146% down to 23% Signed-off-by: Al Viro <viro@zeniv.linux.org.uk>
53 lines
1.2 KiB
C
53 lines
1.2 KiB
C
/*
|
|
* SELinux services exported to the rest of the kernel.
|
|
*
|
|
* Author: James Morris <jmorris@redhat.com>
|
|
*
|
|
* Copyright (C) 2005 Red Hat, Inc., James Morris <jmorris@redhat.com>
|
|
* Copyright (C) 2006 Trusted Computer Solutions, Inc. <dgoeddel@trustedcs.com>
|
|
*
|
|
* This program is free software; you can redistribute it and/or modify
|
|
* it under the terms of the GNU General Public License version 2,
|
|
* as published by the Free Software Foundation.
|
|
*/
|
|
#include <linux/types.h>
|
|
#include <linux/kernel.h>
|
|
#include <linux/module.h>
|
|
#include <linux/selinux.h>
|
|
#include <linux/fs.h>
|
|
|
|
#include "security.h"
|
|
#include "objsec.h"
|
|
|
|
void selinux_task_ctxid(struct task_struct *tsk, u32 *ctxid)
|
|
{
|
|
struct task_security_struct *tsec = tsk->security;
|
|
if (selinux_enabled)
|
|
*ctxid = tsec->sid;
|
|
else
|
|
*ctxid = 0;
|
|
}
|
|
|
|
int selinux_ctxid_to_string(u32 ctxid, char **ctx, u32 *ctxlen)
|
|
{
|
|
if (selinux_enabled)
|
|
return security_sid_to_context(ctxid, ctx, ctxlen);
|
|
else {
|
|
*ctx = NULL;
|
|
*ctxlen = 0;
|
|
}
|
|
|
|
return 0;
|
|
}
|
|
|
|
void selinux_get_inode_sid(const struct inode *inode, u32 *sid)
|
|
{
|
|
if (selinux_enabled) {
|
|
struct inode_security_struct *isec = inode->i_security;
|
|
*sid = isec->sid;
|
|
return;
|
|
}
|
|
*sid = 0;
|
|
}
|
|
|