On Sat, 2007-07-14 at 14:47 -0700, Casey Schaufler wrote:
> The patch exceeds the 40k size rule, coming in at about 100k.
> I would be happy to send the patch to anyone who has trouble
> with the project site. The patch can be found under:
>
> http:/www.schaufler-ca.com/data/smack-0710A-patch.tar
+/*
+ * In smack sockets are not security policy elements.
+ * The task associated with the socket is the policy
+ * element, so point the socket security blob at the
+ * task blob.
+ */
+static int smack_sk_alloc_security(struct sock *sk, int family, gfp_t
priority)
+{
+ sk->sk_security = current->security;
+ return 0;
+}
And if the socket outlives the task?
--
Stephen Smalley
National Security Agency
-
To unsubscribe from this list: send the line "unsubscribe
linux-security-module" in
the body of a message to [EMAIL PROTECTED]
More majordomo info at http://vger.kernel.org/majordomo-info.html
