9eb9c9327563014ad6a807814e7975424642d5b9 |
|
19-Feb-2014 |
Stephen Smalley <sds@tycho.nsa.gov> |
Get rid of security_context_t and fix const declarations. In attempting to enable building various part of Android with -Wall -Werror, we found that the const security_context_t declarations in libselinux are incorrect; const char * was intended, but const security_context_t translates to char * const and triggers warnings on passing const char * from the caller. Easiest fix is to replace them all with const char *. And while we are at it, just get rid of all usage of security_context_t itself as it adds no value - there is no true encapsulation of the security context strings and callers already directly use string functions on them. typedef left to permit building legacy users until such a time as all are updated. This is a port of Change-Id I2f9df7bb9f575f76024c3e5f5b660345da2931a7 from Android, augmented to deal with all of the other code in upstream libselinux and updating the man pages too. Signed-off-by: Stephen Smalley <sds@tycho.nsa.gov> Acked-by: Eric Paris <eparis@redhat.com>
/external/selinux/libselinux/src/avc_sidtab.h
|
58866dd5668e845fd1cc0f62ae8dd4b93d9caf2b |
|
02-Sep-2009 |
Eamon Walsh <ewalsh@tycho.nsa.gov> |
The userspace AVC currently has refcounted SID's. This patch strips out the refcounting under the following justifications: 1. Managing the refcounts by calling sidput() and sidget() as appropriate is a difficult and bug-prone task for users of the library. 2. The userspace AVC doesn't currently make use of the refcounts to reclaim unused SID's unless avc_cleanup() is explicitly called. 3. The kernel itself no longer uses refcounting for it's own SID's. The implication of this change is that SID's (basically malloc'ed copies of security contexts) will persist in the AVC's SID table until the next call to avc_destroy(). This presents the potential for increased memory usage, but in practice I don't believe this will be an issue. ABI compatibility is preserved: the avc_cleanup(), sidput(), and sidget() calls are changed to no-ops. Signed-off-by: Eamon Walsh <ewalsh@tycho.nsa.gov> Acked-by: Stephen Smalley <sds@tycho.nsa.gov>
/external/selinux/libselinux/src/avc_sidtab.h
|
13cd4c8960688af11ad23b4c946149015c80d549 |
|
19-Aug-2008 |
Joshua Brindle <method@manicmethod.com> |
initial import from svn trunk revision 2950
/external/selinux/libselinux/src/avc_sidtab.h
|