SELinux: Allow NetLabel to directly cache SIDs
Now that the SELinux NetLabel "base SID" is always the netmsg initial SID we can do a big optimization - caching the SID and not just the MLS attributes. This not only saves a lot of per-packet memory allocations and copies but it has a nice side effect of removing a chunk of code. Signed-off-by:Paul Moore <paul.moore@hp.com> Signed-off-by:
James Morris <jmorris@namei.org>
Showing
- security/selinux/hooks.c 1 addition, 5 deletionssecurity/selinux/hooks.c
- security/selinux/include/netlabel.h 0 additions, 2 deletionssecurity/selinux/include/netlabel.h
- security/selinux/include/security.h 0 additions, 2 deletionssecurity/selinux/include/security.h
- security/selinux/netlabel.c 34 additions, 21 deletionssecurity/selinux/netlabel.c
- security/selinux/ss/services.c 20 additions, 104 deletionssecurity/selinux/ss/services.c
Loading
Please register or sign in to comment