summaryrefslogtreecommitdiffstats
path: root/security
diff options
context:
space:
mode:
authorPetko Manolov <petkan@nucleusys.com>2018-05-22 16:06:55 +0200
committerMimi Zohar <zohar@linux.vnet.ibm.com>2018-05-31 16:13:22 +0200
commit53b626f9038ee357a2183a6994c11fd9dfb3f94d (patch)
treec78ffe9522edb7564797753f82d3960335385091 /security
parentima: use match_string() helper (diff)
downloadlinux-53b626f9038ee357a2183a6994c11fd9dfb3f94d.tar.xz
linux-53b626f9038ee357a2183a6994c11fd9dfb3f94d.zip
IMA: use list_splice_tail_init_rcu() instead of its open coded variant
Use list_splice_tail_init_rcu() to extend the existing custom IMA policy with additional IMA policy rules. Signed-off-by: Petko Manolov <petko.manolov@konsulko.com> Signed-off-by: Mimi Zohar <zohar@linux.vnet.ibm.com>
Diffstat (limited to 'security')
-rw-r--r--security/integrity/ima/ima_policy.c17
1 files changed, 2 insertions, 15 deletions
diff --git a/security/integrity/ima/ima_policy.c b/security/integrity/ima/ima_policy.c
index 8bbc18eb07eb..cdcc9a7b4e24 100644
--- a/security/integrity/ima/ima_policy.c
+++ b/security/integrity/ima/ima_policy.c
@@ -527,22 +527,9 @@ int ima_check_policy(void)
*/
void ima_update_policy(void)
{
- struct list_head *first, *last, *policy;
+ struct list_head *policy = &ima_policy_rules;
- /* append current policy with the new rules */
- first = (&ima_temp_rules)->next;
- last = (&ima_temp_rules)->prev;
- policy = &ima_policy_rules;
-
- synchronize_rcu();
-
- last->next = policy;
- rcu_assign_pointer(list_next_rcu(policy->prev), first);
- first->prev = policy->prev;
- policy->prev = last;
-
- /* prepare for the next policy rules addition */
- INIT_LIST_HEAD(&ima_temp_rules);
+ list_splice_tail_init_rcu(&ima_temp_rules, policy, synchronize_rcu);
if (ima_rules != policy) {
ima_policy_flag = 0;