diff options
| author | Paul Moore <paul@paul-moore.com> | 2025-07-21 16:36:03 -0400 |
|---|---|---|
| committer | Paul Moore <paul@paul-moore.com> | 2025-10-22 19:24:24 -0400 |
| commit | 3423c6397ce21356c3c2fac0b2727d428d96cfa4 (patch) | |
| tree | 5f68f60ee9596d2d8481f7d92873615915be4f0e /security | |
| parent | ac3c47cece27014e34d2ec561d72c0a7c7de50a9 (diff) | |
lsm: group lsm_order_parse() with the other lsm_order_*() functions
Move the lsm_order_parse() function near the other lsm_order_*()
functions to improve readability.
No code changes.
Reviewed-by: Casey Schaufler <casey@schaufler-ca.com>
Reviewed-by: John Johansen <john.johhansen@canonical.com>
Reviewed-by: Mimi Zohar <zohar@linux.ibm.com>
Signed-off-by: Paul Moore <paul@paul-moore.com>
Diffstat (limited to 'security')
| -rw-r--r-- | security/lsm_init.c | 140 |
1 files changed, 70 insertions, 70 deletions
diff --git a/security/lsm_init.c b/security/lsm_init.c index cfcf3bf7127f..fd69bde9112e 100644 --- a/security/lsm_init.c +++ b/security/lsm_init.c @@ -170,6 +170,76 @@ static void __init lsm_order_append(struct lsm_info *lsm, const char *src) } /** + * lsm_order_parse - Parse the comma delimited LSM list + * @list: LSM list + * @src: source of the list + */ +static void __init lsm_order_parse(const char *list, const char *src) +{ + struct lsm_info *lsm; + char *sep, *name, *next; + + /* Handle any Legacy LSM exclusions if one was specified. */ + if (lsm_order_legacy) { + /* + * To match the original "security=" behavior, this explicitly + * does NOT fallback to another Legacy Major if the selected + * one was separately disabled: disable all non-matching + * Legacy Major LSMs. + */ + lsm_for_each_raw(lsm) { + if ((lsm->flags & LSM_FLAG_LEGACY_MAJOR) && + strcmp(lsm->id->name, lsm_order_legacy)) { + lsm_enabled_set(lsm, false); + lsm_pr_dbg("skip legacy LSM conflict %s:%s\n", + src, lsm->id->name); + } + } + } + + /* LSM_ORDER_FIRST */ + lsm_for_each_raw(lsm) { + if (lsm->order == LSM_ORDER_FIRST) + lsm_order_append(lsm, "first"); + } + + /* Normal or "mutable" LSMs */ + sep = kstrdup(list, GFP_KERNEL); + next = sep; + /* Walk the list, looking for matching LSMs. */ + while ((name = strsep(&next, ",")) != NULL) { + lsm_for_each_raw(lsm) { + if (!strcmp(lsm->id->name, name) && + lsm->order == LSM_ORDER_MUTABLE) + lsm_order_append(lsm, src); + } + } + kfree(sep); + + /* Legacy LSM if specified. */ + if (lsm_order_legacy) { + lsm_for_each_raw(lsm) { + if (!strcmp(lsm->id->name, lsm_order_legacy)) + lsm_order_append(lsm, src); + } + } + + /* LSM_ORDER_LAST */ + lsm_for_each_raw(lsm) { + if (lsm->order == LSM_ORDER_LAST) + lsm_order_append(lsm, "last"); + } + + /* Disable all LSMs not previously enabled. */ + lsm_for_each_raw(lsm) { + if (lsm_order_exists(lsm)) + continue; + lsm_enabled_set(lsm, false); + lsm_pr_dbg("skip disabled LSM %s:%s\n", src, lsm->id->name); + } +} + +/** * lsm_blob_size_update - Update the LSM blob size and offset information * @sz_req: the requested additional blob size * @sz_cur: the existing blob size @@ -242,76 +312,6 @@ static void __init lsm_init_single(struct lsm_info *lsm) } /** - * lsm_order_parse - Parse the comma delimited LSM list - * @list: LSM list - * @src: source of the list - */ -static void __init lsm_order_parse(const char *list, const char *src) -{ - struct lsm_info *lsm; - char *sep, *name, *next; - - /* Handle any Legacy LSM exclusions if one was specified. */ - if (lsm_order_legacy) { - /* - * To match the original "security=" behavior, this explicitly - * does NOT fallback to another Legacy Major if the selected - * one was separately disabled: disable all non-matching - * Legacy Major LSMs. - */ - lsm_for_each_raw(lsm) { - if ((lsm->flags & LSM_FLAG_LEGACY_MAJOR) && - strcmp(lsm->id->name, lsm_order_legacy)) { - lsm_enabled_set(lsm, false); - lsm_pr_dbg("skip legacy LSM conflict %s:%s\n", - src, lsm->id->name); - } - } - } - - /* LSM_ORDER_FIRST */ - lsm_for_each_raw(lsm) { - if (lsm->order == LSM_ORDER_FIRST) - lsm_order_append(lsm, "first"); - } - - /* Normal or "mutable" LSMs */ - sep = kstrdup(list, GFP_KERNEL); - next = sep; - /* Walk the list, looking for matching LSMs. */ - while ((name = strsep(&next, ",")) != NULL) { - lsm_for_each_raw(lsm) { - if (!strcmp(lsm->id->name, name) && - lsm->order == LSM_ORDER_MUTABLE) - lsm_order_append(lsm, src); - } - } - kfree(sep); - - /* Legacy LSM if specified. */ - if (lsm_order_legacy) { - lsm_for_each_raw(lsm) { - if (!strcmp(lsm->id->name, lsm_order_legacy)) - lsm_order_append(lsm, src); - } - } - - /* LSM_ORDER_LAST */ - lsm_for_each_raw(lsm) { - if (lsm->order == LSM_ORDER_LAST) - lsm_order_append(lsm, "last"); - } - - /* Disable all LSMs not previously enabled. */ - lsm_for_each_raw(lsm) { - if (lsm_order_exists(lsm)) - continue; - lsm_enabled_set(lsm, false); - lsm_pr_dbg("skip disabled LSM %s:%s\n", src, lsm->id->name); - } -} - -/** * lsm_static_call_init - Initialize a LSM's static calls * @hl: LSM hook list */ |