evie/android_kernel_oneplus_msm8998
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

SELinux: deterministic ordering of range transition rules

Browse source 
Range transition rules are placed in the hash table in an (almost)
arbitrary order.  This patch inserts them in a fixed order to make policy
retrival more predictable.

Signed-off-by: Eric Paris <eparis@redhat.com>
Signed-off-by: James Morris <jmorris@namei.org>
This commit is contained in:
Eric Paris 2010-10-13 17:50:14 -04:00 • committed by James Morris
parent b28efd54d9
commit 4419aae1f4
1 changed files with 13 additions and 3 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

16
security/selinux/ss/policydb.c
View file

@ -185,9 +185,19 @@ static u32 rangetr_hash(struct hashtab *h, const void *k)
static int rangetr_cmp(struct hashtab *h, const void *k1, const void *k2) static int rangetr_cmp(struct hashtab *h, const void *k1, const void *k2)
{ {
const struct range_trans *key1 = k1, *key2 = k2; const struct range_trans *key1 = k1, *key2 = k2;
return (key1->source_type != key2->source_type || int v;
key1->target_type != key2->target_type ||
key1->target_class != key2->target_class); v = key1->source_type - key2->source_type;
if (v)
return v;
v = key1->target_type - key2->target_type;
if (v)
return v;
v = key1->target_class - key2->target_class;
return v;
} }
/* /*