Eric Lee / smarc-fsl-linux-kernel

21 Dec, 2016

1 commit

  • bfc5e3a6a   selinux: use the kernel headers when building scripts/selinux ... Browse Code »

    Commit 3322d0d64f4e ("selinux: keep SELinux in sync with new capability
    definitions") added a check on the defined capabilities without
    explicitly including the capability header file which caused problems
    when building genheaders for users of clang/llvm. Resolve this by
    using the kernel headers when building genheaders, which is arguably
    the right thing to do regardless, and explicitly including the
    kernel's capability.h header file in classmap.h. We also update the
    mdp build, even though it wasn't causing an error we really should
    be using the headers from the kernel we are building.

    Reported-by: Nicolas Iooss
    Signed-off-by: Paul Moore

    Paul Moore
     

18 Jun, 2014

1 commit

04 Mar, 2011

1 commit

  • 4bc6c2d5d   SELinux: Auto-generate security_is_socket_class ... Browse Code »

    The security_is_socket_class() is auto-generated by genheaders based
    on classmap.h to reduce maintenance effort when a new class is defined
    in SELinux kernel. The name for any socket class should be suffixed by
    "socket" and doesn't contain more than one substr of "socket".

    Signed-off-by: Harry Ciao
    Signed-off-by: Eric Paris
    Acked-by: Stephen Smalley

    Harry Ciao
     

16 Mar, 2010

1 commit

  • 310de047e   selinux: fix warning in genheaders ... Browse Code »

    Fix const warning in the genheaders script as a result of
    changes to the headers, as noted here:

    http://linux.derkeiler.com/Mailing-Lists/Kernel/2010-03/msg03977.html

    Reported-by: Stephen Rothwell
    Signed-off-by: James Morris

    James Morris
     

23 Nov, 2009

1 commit

  • 85c3b529f   SELinux: header generation may hit infinite loop ... Browse Code »

    If a permission name is long enough the selinux class definition generation
    tool will go into a infinite loop. This is because it's macro max() is
    fooled into thinking it is dealing with unsigned numbers. This patch makes
    sure the macro always uses signed number so 1 > -1.

    Signed-off-by: Eric Paris
    Signed-off-by: James Morris

    Eric Paris
     

19 Nov, 2009

1 commit

  • 821d35a56   selinux: Fix warnings ... Browse Code »

    scripts/selinux/genheaders/genheaders.c:20: warning: no previous prototype
    for ?usage?
    scripts/selinux/genheaders/genheaders.c:26: warning: no previous prototype
    for ?stoupperx?

    Signed-off-by: Alan Cox
    Acked-by: WANG Cong
    Signed-off-by: James Morris

    Alan Cox
     

24 Oct, 2009

1 commit

07 Oct, 2009

1 commit

  • 8753f6bec   selinux: generate flask headers during kernel build ... Browse Code »

    Add a simple utility (scripts/selinux/genheaders) and invoke it to
    generate the kernel-private class and permission indices in flask.h
    and av_permissions.h automatically during the kernel build from the
    security class mapping definitions in classmap.h. Adding new kernel
    classes and permissions can then be done just by adding them to classmap.h.

    Signed-off-by: Stephen Smalley
    Signed-off-by: James Morris

    Stephen Smalley