You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.

Eric Paris 6371dcd36f selinux: convert the policy type_attr_map to flex_array ... Current selinux policy can have over 3000 types. The type_attr_map in policy is an array sized by the number of types times sizeof(struct ebitmap) (12 on x86_64). Basic math tells us the array is going to be of length 3000 x 12 = 36,000 bytes. The largest 'safe' allocation on a long running system is 16k. Most of the time a 32k allocation will work. But on long running systems a 64k allocation (what we need) can fail quite regularly. In order to deal with this I am converting the type_attr_map to use flex_arrays. Let the library code deal with breaking this into PAGE_SIZE pieces. -v2 rework some of the if(!obj) BUG() to be BUG_ON(!obj) drop flex_array_put() calls and just use a _get() object directly -v3 make apply to James' tree (drop the policydb_write changes) Signed-off-by: Eric Paris <eparis@redhat.com> Acked-by: Stephen D. Smalley <sds@tycho.nsa.gov> Signed-off-by: James Morris <jmorris@namei.org>		15 years ago
..
Makefile	selinux: generate flask headers during kernel build	16 years ago
avtab.c	selinux: cleanup return codes in avtab_read_item()	15 years ago
avtab.h	SELinux: Reduce max avtab size to avoid page allocation failures	15 years ago
conditional.c	selinux: fix error codes in cond_read_bool()	15 years ago
conditional.h	selinux: conditional expression type validation was off-by-one	17 years ago
constraint.h	…
context.h	selinux: allow MLS->non-MLS and vice versa upon policy reload	15 years ago
ebitmap.c	netlabel: fix export of SELinux categories > 127	15 years ago
ebitmap.h	SELinux: kills warnings in Improve SELinux performance when AVC misses	18 years ago
hashtab.c	selinux: Unify for- and while-loop style	17 years ago
hashtab.h	SELinux: hashtab.h whitespace, syntax, and other cleanups	17 years ago
mls.c	Security: Fix coding style in security/	15 years ago
mls.h	selinux: allow MLS->non-MLS and vice versa upon policy reload	15 years ago
mls_types.h	selinux: allow MLS->non-MLS and vice versa upon policy reload	15 years ago
policydb.c	selinux: convert the policy type_attr_map to flex_array	15 years ago
policydb.h	selinux: convert the policy type_attr_map to flex_array	15 years ago
services.c	selinux: convert the policy type_attr_map to flex_array	15 years ago
services.h	…
sidtab.c	selinux: Unify for- and while-loop style	17 years ago
sidtab.h	selinux: support deferred mapping of contexts	17 years ago
symtab.c	selinux: fix error codes in symtab_init()	15 years ago
symtab.h	…