123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127 |
- #include <linux/kernel.h>
- #include <linux/gfp.h>
- #include <linux/mm.h>
- #include <linux/mutex.h>
- #include "avc.h"
- #include "services.h"
- static struct page *selinux_status_page;
- static DEFINE_MUTEX(selinux_status_lock);
- struct page *selinux_kernel_status_page(void)
- {
- struct selinux_kernel_status *status;
- struct page *result = NULL;
- mutex_lock(&selinux_status_lock);
- if (!selinux_status_page) {
- selinux_status_page = alloc_page(GFP_KERNEL|__GFP_ZERO);
- if (selinux_status_page) {
- status = page_address(selinux_status_page);
- status->version = SELINUX_KERNEL_STATUS_VERSION;
- status->sequence = 0;
- status->enforcing = selinux_enforcing;
-
- status->policyload = 0;
- status->deny_unknown = !security_get_allow_unknown();
- }
- }
- result = selinux_status_page;
- mutex_unlock(&selinux_status_lock);
- return result;
- }
- void selinux_status_update_setenforce(int enforcing)
- {
- struct selinux_kernel_status *status;
- mutex_lock(&selinux_status_lock);
- if (selinux_status_page) {
- status = page_address(selinux_status_page);
- status->sequence++;
- smp_wmb();
- status->enforcing = enforcing;
- smp_wmb();
- status->sequence++;
- }
- mutex_unlock(&selinux_status_lock);
- }
- void selinux_status_update_policyload(int seqno)
- {
- struct selinux_kernel_status *status;
- mutex_lock(&selinux_status_lock);
- if (selinux_status_page) {
- status = page_address(selinux_status_page);
- status->sequence++;
- smp_wmb();
- status->policyload = seqno;
- status->deny_unknown = !security_get_allow_unknown();
- smp_wmb();
- status->sequence++;
- }
- mutex_unlock(&selinux_status_lock);
- }
|