Re: inclusion of selinux.h in cred.h

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



On 8/17/2011 6:35 AM, Eric Paris wrote:
On Wed, Aug 17, 2011 at 1:09 AM, Casey Schaufler<casey@xxxxxxxxxxxxxxxx>  wrote:
Is there some reason that linux/selinux.h is
#included in linux/cred.h?

I've been building kernels with the inclusion
commented out and I have encountered no problems.

It's not a problem, but I am curious.
It can be safely moved, but not removed.  This was added when
creds_are_invalid() was implemented in the header, which makes SELinux
specific calls (see commit ed868a56988464cd31de0302426a5e94d3127f10).
This function was moved to kernel/cred.c in commit
74908a0009eb36054190ab80deb9671014efed96 but the header was not moved
with it.  If you want to send a patch to move the header from cred.h
to cred.c I think that would make a lot of sense.

Enlightenment. Thank you.

Since creds_are_invalid() only exists under CONFIG_DEBUG_CREDENTIALS
I would expect the include of selinux.h to be under that ifdef as well.


-Eric

--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@xxxxxxxxxxxxx with
the words "unsubscribe selinux" without quotes as the message.



--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@xxxxxxxxxxxxx with
the words "unsubscribe selinux" without quotes as the message.


[Index of Archives]     [Selinux Refpolicy]     [Linux SGX]     [Fedora Users]     [Fedora Desktop]     [Yosemite Photos]     [Yosemite Camping]     [Yosemite Campsites]     [KDE Users]     [Gnome Users]

  Powered by Linux