[PATCH security-next 1/2] smack: use pernet operations for hook registration

Florian Westphal fw at strlen.de
Fri Jun 2 08:48:09 UTC 2017


Pablo Neira Ayuso <pablo at netfilter.org> wrote:
> On Thu, Jun 01, 2017 at 09:44:05AM -0700, Casey Schaufler wrote:
> > On 4/21/2017 2:49 AM, Florian Westphal wrote:
> > > It will allow us to remove the old netfilter hook api in the near future.
> > >
> > > Signed-off-by: Florian Westphal <fw at strlen.de>
> > 
> > I have applied this to git://github.com/cschaufler/smack-next#smack-for-4.13
> 
> Thanks Casey.
> 
> We're very much looking forward to getting rid of all these
> nf_register_hooks() calls all over the tree. This patch helps us going
> in that direction.

selinux is the last user of this api left in the tree.
Once Paul applies my patch to convert to pernet_ops we only have to wait until
all the changes are in linus tree.

Then you only need to merge linus tree into nf.git and then I will
submit the the removal patch.

I think we can get rid of old api in 4.13.
--
To unsubscribe from this list: send the line "unsubscribe linux-security-module" in
the body of a message to majordomo at vger.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html



More information about the Linux-security-module-archive mailing list