Re: [PATCH v26 07/25] LSM: Use lsmblob in security_secctx_to_secid
From: Kees Cook
Date: Fri May 14 2021 - 15:04:01 EST
On Thu, May 13, 2021 at 01:07:49PM -0700, Casey Schaufler wrote:
> Change the security_secctx_to_secid interface to use a lsmblob
> structure in place of the single u32 secid in support of
> module stacking. Change its callers to do the same.
>
> The security module hook is unchanged, still passing back a secid.
> The infrastructure passes the correct entry from the lsmblob.
>
> Signed-off-by: Casey Schaufler <casey@xxxxxxxxxxxxxxxx>
This looks like sane refactoring into the new blob type.
Reviewed-by: Kees Cook <keescook@xxxxxxxxxxxx>
--
Kees Cook