1. 30 Sep, 2009 1 commit
    • Eric Paris's avatar
      SELinux: reset the security_ops before flushing the avc cache · af8ff049
      Eric Paris authored
      This patch resets the security_ops to the secondary_ops before it flushes
      the avc.  It's still possible that a task on another processor could have
      already passed the security_ops dereference and be executing an selinux hook
      function which would add a new avc entry.  That entry would still not be
      freed.  This should however help to reduce the number of needless avcs the
      kernel has when selinux is disabled at run time.  There is no wasted
      memory if selinux is disabled on the command line or not compiled.
      Signed-off-by: default avatarEric Paris <eparis@redhat.com>
      Signed-off-by: default avatarJames Morris <jmorris@namei.org>
      af8ff049
  2. 29 Sep, 2009 1 commit
  3. 27 Sep, 2009 14 commits
  4. 26 Sep, 2009 21 commits
  5. 25 Sep, 2009 3 commits