linux-stable/security/selinux/include
Paul Moore 03e1ad7b5d LSM: Make the Labeled IPsec hooks more stack friendly
The xfrm_get_policy() and xfrm_add_pol_expire() put some rather large structs
on the stack to work around the LSM API.  This patch attempts to fix that
problem by changing the LSM API to require only the relevant "security"
pointers instead of the entire SPD entry; we do this for all of the
security_xfrm_policy*() functions to keep things consistent.

Signed-off-by: Paul Moore <paul.moore@hp.com>
Acked-by: James Morris <jmorris@namei.org>
Signed-off-by: David S. Miller <davem@davemloft.net>
2008-04-12 19:07:52 -07:00
..
av_inherit.h [SELinux]: Add support for DCCP 2006-12-02 21:22:24 -08:00
av_perm_to_string.h selinux: support 64-bit capabilities 2008-02-11 20:30:02 +11:00
av_permissions.h selinux: support 64-bit capabilities 2008-02-11 20:30:02 +11:00
avc.h d_path: Use struct path in struct avc_audit_data 2008-02-14 21:17:08 -08:00
avc_ss.h SELinux: export object class and permission definitions 2006-11-28 12:04:36 -05:00
class_to_string.h selinux: support 64-bit capabilities 2008-02-11 20:30:02 +11:00
common_perm_to_string.h
conditional.h
flask.h selinux: support 64-bit capabilities 2008-02-11 20:30:02 +11:00
initial_sid_to_string.h
netif.h SELinux: Convert the netif code to use ifindex values 2008-01-30 08:17:21 +11:00
netlabel.h SELinux: Allow NetLabel to directly cache SIDs 2008-01-30 08:17:27 +11:00
netnode.h SELinux: Add a network node caching mechanism similar to the sel_netif_*() functions 2008-01-30 08:17:23 +11:00
objsec.h SELinux: Better integration between peer labeling subsystems 2008-01-30 08:17:25 +11:00
security.h LSM/SELinux: Interfaces to allow FS to control mount options 2008-03-06 08:40:53 +11:00
xfrm.h LSM: Make the Labeled IPsec hooks more stack friendly 2008-04-12 19:07:52 -07:00