From: Andy Adamson <andros@xxxxxxxxxx>
RPCSEC_GSS Version 3 label assertions require the client thread
sid in string context form
Signed-off-by: Andy Adamson <andros@xxxxxxxxxx>
---
include/linux/selinux.h | 1 +
security/selinux/hooks.c | 12 ++++++++++++
2 files changed, 13 insertions(+)
diff --git a/include/linux/selinux.h b/include/linux/selinux.h
index 44f4596..3dfaf41 100644
--- a/include/linux/selinux.h
+++ b/include/linux/selinux.h
@@ -24,6 +24,7 @@
* selinux_is_enabled - is SELinux enabled?
*/
bool selinux_is_enabled(void);
+int security_current_sid_to_context(char **scontext, u32 *scontext_len);
#else
static inline bool selinux_is_enabled(void)
diff --git a/security/selinux/hooks.c b/security/selinux/hooks.c
index 09fd610..f355c49 100644
--- a/security/selinux/hooks.c
+++ b/security/selinux/hooks.c
@@ -6463,3 +6463,15 @@ int selinux_disable(void)
return 0;
}
#endif
+
+/**
+ * RPCSEC_GSS Version 3 Full Mode labeling needs this interface
+ * or one like it.
+ */
+int security_current_sid_to_context(char **scontext, u32 *scontext_len)
+{
+ const struct task_security_struct *ts = current_security();
+
+ return security_sid_to_context(ts->sid, scontext, scontext_len);
+}
+EXPORT_SYMBOL_GPL(security_current_sid_to_context);
--
1.8.3.1
--
To unsubscribe from this list: send the line "unsubscribe linux-nfs" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at http://vger.kernel.org/majordomo-info.html
