On Thu, May 13, 2021 at 01:07:59PM -0700, Casey Schaufler wrote:
Change the security_inode_getsecctx() interface to fill
a lsmcontext structure instead of data and length pointers.
This provides the information about which LSM created the
context so that security_release_secctx() can use the
correct hook.
Acked-by: Stephen Smalley <sds(a)tycho.nsa.gov>
Acked-by: Paul Moore <paul(a)paul-moore.com>
Acked-by: Chuck Lever <chuck.lever(a)oracle.com>
Reviewed-by: John Johansen <john.johansen(a)canonical.com>
Signed-off-by: Casey Schaufler <casey(a)schaufler-ca.com>
Seem good to me.
Reviewed-by: Kees Cook <keescook(a)chromium.org>
--
Kees Cook