| From | Kees Cook <> | Date | Wed, 12 Sep 2018 16:10:25 -0700 | Subject | Re: [PATCH 03/10] SELinux: Abstract use of cred security blob |
| |
On Tue, Sep 11, 2018 at 9:41 AM, Casey Schaufler <casey@schaufler-ca.com> wrote: > Don't use the cred->security pointer directly. > Provide a helper function that provides the security blob pointer. > > Signed-off-by: Casey Schaufler <casey@schaufler-ca.com>
Like smack, this seems to be largely:
s/$identifier->security/selinux_cred($identifier)/ s/current_security()/selinux_cred(current_cred())/
Is that right? The one __task_cred() use seemed to be fully contained under rcu read lock.
Reviewed-by: Kees Cook <keescook@chromium.org>
-Kees
-- Kees Cook Pixel Security
|