Re: [PATCH v26 07/25] LSM: Use lsmblob in security_secctx_to_secid

From: Kees Cook
Date: Fri May 14 2021 - 15:04:01 EST


On Thu, May 13, 2021 at 01:07:49PM -0700, Casey Schaufler wrote:
> Change the security_secctx_to_secid interface to use a lsmblob
> structure in place of the single u32 secid in support of
> module stacking. Change its callers to do the same.
>
> The security module hook is unchanged, still passing back a secid.
> The infrastructure passes the correct entry from the lsmblob.
>
> Signed-off-by: Casey Schaufler <casey@xxxxxxxxxxxxxxxx>

This looks like sane refactoring into the new blob type.

Reviewed-by: Kees Cook <keescook@xxxxxxxxxxxx>

--
Kees Cook