Re: Common header for security blobs

From: Chris Wright (chrisat_private)
Date: Thu Sep 06 2001 - 17:36:56 PDT

  • Next message: Chris Wright: "Re: Common header for security blobs"

    * Stephen Smalley (sdsat_private) wrote:
    > 
    > On Thu, 6 Sep 2001, Greg KH wrote:
    > 
    > > If not, the overhead of having another void * indirection, and a search
    > > on a list of 1 member (another indirection), would not be nice for those
    > > people concerned with speed issues.
    > 
    > Actually, would it really require this overhead?  You can embed the
    > common header at the beginning of your module's private security
    > blob structure, and if you only have one module, then you'll match
    > on the first comparison with the module id, so there won't be any
    > list searching.  The header would be:
    > 
    > struct security_obj_header {
    > 	unsigned int id;
    > 	struct list_head s_list;
    > };
    
    hmm, i think you'd need the void* blob in your above struct.  this list
    contains only the next and prev pointers, no data pointer.  and i still
    think the lsm framework would have to initialize the list.
    
    -chris
    
    _______________________________________________
    linux-security-module mailing list
    linux-security-moduleat_private
    http://mail.wirex.com/mailman/listinfo/linux-security-module
    



    This archive was generated by hypermail 2b30 : Thu Sep 06 2001 - 17:45:28 PDT