SELinux: Add class support to the role_trans structure
authorHarry Ciao <qingtao.cao@windriver.com>
Fri, 25 Mar 2011 05:51:56 +0000 (13:51 +0800)
committerEric Paris <eparis@redhat.com>
Mon, 28 Mar 2011 18:20:58 +0000 (14:20 -0400)
commit8023976cf4627d9f1d82ad468ec40e32eb87d211
tree82af1157ffbb00be2a8d2357a8c2fd88826233b1
parentfe3fa43039d47ee4e22caf460b79b62a14937f79
SELinux: Add class support to the role_trans structure

If kernel policy version is >= 26, then the binary representation of
the role_trans structure supports specifying the class for the current
subject or the newly created object.

If kernel policy version is < 26, then the class field would be default
to the process class.

Signed-off-by: Harry Ciao <qingtao.cao@windriver.com>
Acked-by: Stephen Smalley <sds@tycho.nsa.gov>
Signed-off-by: Eric Paris <eparis@redhat.com>
security/selinux/include/security.h
security/selinux/ss/policydb.c
security/selinux/ss/policydb.h