On 7/15/20 11:04 AM, Stephen Smalley wrote:
+static inline bool selinux_checkreqprot(void)
+{
+ struct selinux_state *state = _state;
+
+ return state->checkreqprot;
+}
Probably should use READ_ONCE().
Will do.
diff --git a/security/selinux/measure.c
On Wed, Jul 15, 2020 at 11:48 AM Lakshmi Ramasubramanian
wrote:
>
> SELinux configuration and policy are some of the critical data for this
> security module that needs to be measured. To enable this measurement
> SELinux needs to implement the interface function, security_state(), that
> the LSM
SELinux configuration and policy are some of the critical data for this
security module that needs to be measured. To enable this measurement
SELinux needs to implement the interface function, security_state(), that
the LSM can call.
Define the security_state() function in SELinux to measure
3 matches
Mail list logo