Re: [PATCH] selinux: Fix bool initialization/comparison

From: Casey Schaufler
Date: Tue Oct 10 2017 - 19:19:53 EST


On 10/7/2017 7:02 AM, Thomas Meyer wrote:
> Bool initializations should use true and false. Bool tests don't need
> comparisons.
>
> Signed-off-by: Thomas Meyer <thomas@xxxxxxxx>
> ---
>
> diff -u -p a/security/selinux/ss/mls.c b/security/selinux/ss/mls.c
> --- a/security/selinux/ss/mls.c
> +++ b/security/selinux/ss/mls.c
> @@ -550,7 +550,7 @@ int mls_compute_sid(struct context *scon
>
> /* Fallthrough */
> case AVTAB_CHANGE:
> - if ((tclass == policydb.process_class) || (sock == true))
> + if ((tclass == policydb.process_class) || (sock))

How about

+ if ((tclass == policydb.process_class) || sock)

> /* Use the process MLS attributes. */
> return mls_context_cpy(newcontext, scontext);
> else
> diff -u -p a/security/selinux/ss/services.c b/security/selinux/ss/services.c
> --- a/security/selinux/ss/services.c
> +++ b/security/selinux/ss/services.c
> @@ -1656,7 +1656,7 @@ static int security_compute_sid(u32 ssid
> } else if (cladatum && cladatum->default_role == DEFAULT_TARGET) {
> newcontext.role = tcontext->role;
> } else {
> - if ((tclass == policydb.process_class) || (sock == true))
> + if ((tclass == policydb.process_class) || (sock))

Excessive ()

> newcontext.role = scontext->role;
> else
> newcontext.role = OBJECT_R_VAL;
> @@ -1668,7 +1668,7 @@ static int security_compute_sid(u32 ssid
> } else if (cladatum && cladatum->default_type == DEFAULT_TARGET) {
> newcontext.type = tcontext->type;
> } else {
> - if ((tclass == policydb.process_class) || (sock == true)) {
> + if ((tclass == policydb.process_class) || (sock)) {

Excessive ()

> /* Use the type of process. */
> newcontext.type = scontext->type;
> } else {
>