diff options
| author | Lucian Adrian Grijincu <lucian.grijincu@gmail.com> | 2011-02-01 18:44:56 +0200 |
|---|---|---|
| committer | Eric Paris <eparis@redhat.com> | 2011-02-01 11:54:02 -0500 |
| commit | 4916ca401e3051dad326ddd69765bd0e3f32fb9b (patch) | |
| tree | 593778babcd691a498a909a5eaf462f29d241cf6 /kernel | |
| parent | 8e6c96935fcc1ed3dbebc96fddfef3f2f2395afc (diff) | |
| download | op-kernel-dev-4916ca401e3051dad326ddd69765bd0e3f32fb9b.zip op-kernel-dev-4916ca401e3051dad326ddd69765bd0e3f32fb9b.tar.gz | |
security: remove unused security_sysctl hook
The only user for this hook was selinux. sysctl routes every call
through /proc/sys/. Selinux and other security modules use the file
system checks for sysctl too, so no need for this hook any more.
Signed-off-by: Lucian Adrian Grijincu <lucian.grijincu@gmail.com>
Signed-off-by: Eric Paris <eparis@redhat.com>
Diffstat (limited to 'kernel')
| -rw-r--r-- | kernel/sysctl.c | 5 |
1 files changed, 0 insertions, 5 deletions
diff --git a/kernel/sysctl.c b/kernel/sysctl.c index ae5cbb1..e24254c2 100644 --- a/kernel/sysctl.c +++ b/kernel/sysctl.c @@ -1691,13 +1691,8 @@ static int test_perm(int mode, int op) int sysctl_perm(struct ctl_table_root *root, struct ctl_table *table, int op) { - int error; int mode; - error = security_sysctl(table, op & (MAY_READ | MAY_WRITE | MAY_EXEC)); - if (error) - return error; - if (root->permissions) mode = root->permissions(root, current->nsproxy, table); else |
