diff options
author | Christopher J. PeBenito <cpebenito@tresys.com> | 2007-05-23 09:12:09 -0400 |
---|---|---|
committer | James Morris <jmorris@namei.org> | 2007-07-11 22:52:20 -0400 |
commit | e47c8fc582a2c9f3cba059e543c4a056cd6bf8c4 (patch) | |
tree | 20f43ed6ecb1bea6160f660721dee748a57e0568 /security/selinux/include | |
parent | 0dd4ae516e7b5be89caed2532f9d953d0b1dbf01 (diff) | |
download | op-kernel-dev-e47c8fc582a2c9f3cba059e543c4a056cd6bf8c4.zip op-kernel-dev-e47c8fc582a2c9f3cba059e543c4a056cd6bf8c4.tar.gz |
selinux: add selinuxfs structure for object class discovery
The structure is as follows (relative to selinuxfs root):
/class/file/index
/class/file/perms/read
/class/file/perms/write
...
Each class is allocated 33 inodes, 1 for the class index and 32 for
permissions. Relative to SEL_CLASS_INO_OFFSET, the inode of the index file
DIV 33 is the class number. The inode of the permission file % 33 is the
index of the permission for that class.
Signed-off-by: Christopher J. PeBenito <cpebenito@tresys.com>
Signed-off-by: James Morris <jmorris@namei.org>
Diffstat (limited to 'security/selinux/include')
-rw-r--r-- | security/selinux/include/security.h | 1 |
1 files changed, 1 insertions, 0 deletions
diff --git a/security/selinux/include/security.h b/security/selinux/include/security.h index 731a173..83bdd4d 100644 --- a/security/selinux/include/security.h +++ b/security/selinux/include/security.h @@ -41,6 +41,7 @@ extern int selinux_mls_enabled; int security_load_policy(void * data, size_t len); +#define SEL_VEC_MAX 32 struct av_decision { u32 allowed; u32 decided; |