On Tue, Mar 20, 2018 at 11:59 AM, Stephen Smalley <sds@xxxxxxxxxxxxx> wrote: > Move global selinuxfs state to a per-instance structure (selinux_fs_info), > and include a pointer to the selinux_state in this structure. > Pass this selinux_state to all security server operations, thereby > ensuring that each selinuxfs instance presents a view of and acts > as an interface to a particular selinux_state instance. > > This change should have no effect on SELinux behavior or APIs > (userspace or LSM). It merely wraps the selinuxfs global state, > links it to a particular selinux_state (currently always the single > global selinux_state) and uses that state for all operations. > > Signed-off-by: Stephen Smalley <sds@xxxxxxxxxxxxx> > --- > security/selinux/selinuxfs.c | 438 ++++++++++++++++++++++++++----------------- > 1 file changed, 261 insertions(+), 177 deletions(-) Merged, thanks for the respin. -- paul moore www.paul-moore.com