struct aa_ruleset's int size ("the memory consumed by this ruleset") has
never had a writer or a reader since it was introduced; an int also could
not represent large rulesets. Remove it instead of reviving it - resident
policy sizing is introduced per profile by the following patches which
will use long consistently to avoid any risk of overflow.Signed-off-by: Maxime Bélair <[email protected]> --- security/apparmor/include/policy.h | 3 --- 1 file changed, 3 deletions(-) diff --git a/security/apparmor/include/policy.h b/security/apparmor/include/policy.h index 240b2eba7687..8fc515209ede 100644 --- a/security/apparmor/include/policy.h +++ b/security/apparmor/include/policy.h @@ -179,7 +179,6 @@ struct aa_data { /* struct aa_ruleset - data covering mediation rules * @list: list the rule is on - * @size: the memory consumed by this ruleset * @policy: general match rules governing policy * @file: The set of rules governing basic file access and domain transitions * @caps: capabilities for the profile @@ -188,8 +187,6 @@ struct aa_data { * @secmark: secmark label match info */ struct aa_ruleset { - int size; - /* TODO: merge policy and file */ struct aa_policydb *policy; struct aa_policydb *file; -- 2.51.0
