• Linus Torvalds's avatar
    Merge tag 'selinux-pr-20210629' of git://git.kernel.org/pub/scm/linux/kernel/git/pcmoore/selinux · 6bd344e5
    Linus Torvalds authored
    Pull SELinux updates from Paul Moore:
    
     - The slow_avc_audit() function is now non-blocking so we can remove
       the AVC_NONBLOCKING tricks; this also includes the 'flags' variant of
       avc_has_perm().
    
     - Use kmemdup() instead of kcalloc()+copy when copying parts of the
       SELinux policydb.
    
     - The InfiniBand device name is now passed by reference when possible
       in the SELinux code, removing a strncpy().
    
     - Minor cleanups including: constification of avtab function args,
       removal of useless LSM/XFRM function args, SELinux kdoc fixes, and
       removal of redundant assignments.
    
    * tag 'selinux-pr-20210629' of git://git.kernel.org/pub/scm/linux/kernel/git/pcmoore/selinux:
      selinux: kill 'flags' argument in avc_has_perm_flags() and avc_audit()
      selinux: slow_avc_audit has become non-blocking
      selinux: Fix kernel-doc
      selinux: use __GFP_NOWARN with GFP_NOWAIT in the AVC
      lsm_audit,selinux: pass IB device name by reference
      selinux: Remove redundant assignment to rc
      selinux: Corrected comment to match kernel-doc comment
      selinux: delete selinux_xfrm_policy_lookup() useless argument
      selinux: constify some avtab function arguments
      selinux: simplify duplicate_policydb_cond_list() by using kmemdup()
    6bd344e5
security.c 65.6 KB