selinux: add type_transition with name extension support for selinuxfs
authorKohei Kaigai <Kohei.Kaigai@eu.nec.com>
Fri, 1 Apr 2011 14:39:26 +0000 (15:39 +0100)
committerEric Paris <eparis@redhat.com>
Fri, 1 Apr 2011 21:13:23 +0000 (17:13 -0400)
commitf50a3ec961f90e38c0311411179d5dfee1412192
tree600b7909964cd116af1252ecabb5b1415c01d7a0
parent6bde95ce33e1c2ac9b5cb3d814722105131090ec
selinux: add type_transition with name extension support for selinuxfs

The attached patch allows /selinux/create takes optional 4th argument
to support TYPE_TRANSITION with name extension for userspace object
managers.
If 4th argument is not supplied, it shall perform as existing kernel.
In fact, the regression test of SE-PostgreSQL works well on the patched
kernel.

Thanks,

Signed-off-by: KaiGai Kohei <kohei.kaigai@eu.nec.com>
[manually verify fuzz was not an issue, and it wasn't: eparis]
Signed-off-by: Eric Paris <eparis@redhat.com>
security/selinux/include/security.h
security/selinux/selinuxfs.c
security/selinux/ss/services.c