You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.

Stephen Smalley 2c3c05dbcb SELinux: allow preemption between transition permission checks ... In security_get_user_sids, move the transition permission checks outside of the section holding the policy rdlock, and use the AVC to perform the checks, calling cond_resched after each one. These changes should allow preemption between the individual checks and enable caching of the results. It may however increase the overall time spent in the function in some cases, particularly in the cache miss case. The long term fix will be to take much of this logic to userspace by exporting additional state via selinuxfs, and ultimately deprecating and eliminating this interface from the kernel. Tested-by: Ingo Molnar <mingo@elte.hu> Signed-off-by: Stephen Smalley <sds@tycho.nsa.gov> Signed-off-by: James Morris <jmorris@namei.org>		18 years ago
..
Makefile	…
avtab.c	Reassign printk levels in selinux kernel code	18 years ago
avtab.h	…
conditional.c	…
conditional.h	…
constraint.h	…
context.h	…
ebitmap.c	…
ebitmap.h	…
hashtab.c	…
hashtab.h	…
mls.c	…
mls.h	…
mls_types.h	…
policydb.c	selinux: introduce schedule points in policydb_destroy()	18 years ago
policydb.h	…
services.c	SELinux: allow preemption between transition permission checks	18 years ago
services.h	…
sidtab.c	Reassign printk levels in selinux kernel code	18 years ago
sidtab.h	…
symtab.c	…
symtab.h	…