| commit | 3f0882c48286e7bdb0bbdec9c4bfa934e0db8e09 | |
| author | Eric Paris <eparis@redhat.com> | |
| Tue, 3 Apr 2012 16:38:00 +0000 (3 09:38 -0700) | ||
| committer | Linus Torvalds <torvalds@linux-foundation.org> | |
| Tue, 3 Apr 2012 16:49:41 +0000 (3 09:49 -0700) | ||
| tree | 20a7485417c8528d975ef4ff6e90467f63f67ab2 | treesnapshot (tar.gz zip) |
| parent | f8294f1144ad0630075918df4bf94075f5384604 | commitdiff |
SELinux: do not allocate stack space for AVC data unless needed
Instead of declaring the entire selinux_audit_data on the stack when we
start an operation on declare it on the stack if we are going to use it.
We know it's usefulness at the end of the security decision and can declare
it there.
Signed-off-by: Eric Paris <eparis@redhat.com>
Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
Instead of declaring the entire selinux_audit_data on the stack when we
start an operation on declare it on the stack if we are going to use it.
We know it's usefulness at the end of the security decision and can declare
it there.
Signed-off-by: Eric Paris <eparis@redhat.com>
Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
| security/selinux/avc.c | diffblobblamehistory | |
| security/selinux/include/avc.h | diffblobblamehistory |