[PATCH security-next 1/2] smack: use pernet operations for hook registration

Pablo Neira Ayuso pablo at netfilter.org
Fri Jun 2 09:07:57 UTC 2017


On Fri, Jun 02, 2017 at 10:48:09AM +0200, Florian Westphal wrote:
> Pablo Neira Ayuso <pablo at netfilter.org> wrote:
> > On Thu, Jun 01, 2017 at 09:44:05AM -0700, Casey Schaufler wrote:
> > > On 4/21/2017 2:49 AM, Florian Westphal wrote:
> > > > It will allow us to remove the old netfilter hook api in the near future.
> > > >
> > > > Signed-off-by: Florian Westphal <fw at strlen.de>
> > > 
> > > I have applied this to git://github.com/cschaufler/smack-next#smack-for-4.13
> > 
> > Thanks Casey.
> > 
> > We're very much looking forward to getting rid of all these
> > nf_register_hooks() calls all over the tree. This patch helps us going
> > in that direction.
> 
> selinux is the last user of this api left in the tree.
> Once Paul applies my patch to convert to pernet_ops we only have to wait until
> all the changes are in linus tree.
> 
> Then you only need to merge linus tree into nf.git and then I will
> submit the the removal patch.
> 
> I think we can get rid of old api in 4.13.

Great news.
--
To unsubscribe from this list: send the line "unsubscribe linux-security-module" in
the body of a message to majordomo at vger.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html



More information about the Linux-security-module-archive mailing list