mirror of
https://github.com/torvalds/linux.git
synced 2026-10-07 05:31:08 -04:00
Catherine Zhang
dc49c1f94e
From: Catherine Zhang <[email protected]> This patch implements a cleaner fix for the memory leak problem of the original unix datagram getpeersec patch. Instead of creating a security context each time a unix datagram is sent, we only create the security context when the receiver requests it. This new design requires modification of the current unix_getsecpeer_dgram LSM hook and addition of two new hooks, namely, secid_to_secctx and release_secctx. The former retrieves the security context and the latter releases it. A hook is required for releasing the security context because it is up to the security module to decide how that's done. In the case of Selinux, it's a simple kfree operation. Acked-by: Stephen Smalley <[email protected]> Signed-off-by: David S. Miller <[email protected]>