On Wed, 9 Apr 2008, Paul Moore wrote: > The xfrm_get_policy() and xfrm_add_pol_expire() put some rather large structs > on the stack to work around the LSM API. This patch attempts to fix that > problem by changing the LSM API to require only the relevant "security" > pointers instead of the entire SPD entry; we do this for all of the > security_xfrm_policy*() functions to keep things consistent. > > Signed-off-by: Paul Moore <paul.moore@xxxxxx> Acked-by: James Morris <jmorris@xxxxxxxxx> -- James Morris <jmorris@xxxxxxxxx> -- This message was distributed to subscribers of the selinux mailing list. If you no longer wish to subscribe, send mail to majordomo@xxxxxxxxxxxxx with the words "unsubscribe selinux" without quotes as the message.