![]() | |||||||||||||
Messages in this thread |
On Mon, 2007-06-25 at 00:33 -0400, James Morris wrote: > Convert LSM into a static interface, as the ability to unload a security > module is not required by in-tree users and potentially complicates the > overall security architecture.> > Needlessly exported LSM symbols have been unexported, to help reduce API > abuse.> > Parameters for the capability and root_plug modules are now specified at > boot.> > The SECURITY_FRAMEWORK_VERSION macro has also been removed. > > Signed-off-by: James Morris <jmorris@namei.org> > --- > diff --git a/security/security.c b/security/security.c > index fc8601b..e49dae2 100644> --- a/security/security.c> +++ b/security/security.c> @@ -172,8 +170,5 @@ int mod_unreg_security(const char *name, struct security_operations *ops) > return security_ops->unregister_security(name, ops); > } > > -EXPORT_SYMBOL_GPL(register_security); > -EXPORT_SYMBOL_GPL(unregister_security); > -EXPORT_SYMBOL_GPL(mod_reg_security); > -EXPORT_SYMBOL_GPL(mod_unreg_security); > +/* Export required for modular use of security.h inlines */ > EXPORT_SYMBOL(security_ops); I think you want to eliminate that last export too, by taking the security hooks that are called by modules into out-of-line wrapper functions in security.c rather than directly referencing security_ops. -- Stephen Smalley National Security Agency - To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html Please read the FAQ at http://www.tux.org/lkml/ | ||||||||||||
| Last update: 2007-06-25 17:03 [from the cache] ©2003-2008 | |||||||||||||