diff options
| author | Harry Ciao <qingtao.cao@windriver.com> | 2011-03-25 06:51:56 +0100 |
|---|---|---|
| committer | Eric Paris <eparis@redhat.com> | 2011-03-28 20:20:58 +0200 |
| commit | 8023976cf4627d9f1d82ad468ec40e32eb87d211 (patch) | |
| tree | 82af1157ffbb00be2a8d2357a8c2fd88826233b1 /security/selinux/ss/policydb.h | |
| parent | Merge branch 'master' of git://git.infradead.org/users/eparis/selinux into next (diff) | |
| download | linux-8023976cf4627d9f1d82ad468ec40e32eb87d211.tar.xz linux-8023976cf4627d9f1d82ad468ec40e32eb87d211.zip | |
SELinux: Add class support to the role_trans structure
If kernel policy version is >= 26, then the binary representation of
the role_trans structure supports specifying the class for the current
subject or the newly created object.
If kernel policy version is < 26, then the class field would be default
to the process class.
Signed-off-by: Harry Ciao <qingtao.cao@windriver.com>
Acked-by: Stephen Smalley <sds@tycho.nsa.gov>
Signed-off-by: Eric Paris <eparis@redhat.com>
Diffstat (limited to 'security/selinux/ss/policydb.h')
| -rw-r--r-- | security/selinux/ss/policydb.h | 3 |
1 files changed, 2 insertions, 1 deletions
diff --git a/security/selinux/ss/policydb.h b/security/selinux/ss/policydb.h index 732ea4a68682..801175f79cf9 100644 --- a/security/selinux/ss/policydb.h +++ b/security/selinux/ss/policydb.h @@ -72,7 +72,8 @@ struct role_datum { struct role_trans { u32 role; /* current role */ - u32 type; /* program executable type */ + u32 type; /* program executable type, or new object type */ + u32 tclass; /* process class, or new object class */ u32 new_role; /* new role */ struct role_trans *next; }; |