From: Catherine Zhang Date: Wed, 2 Aug 2006 21:12:06 +0000 (-0700) Subject: [AF_UNIX]: Kernel memory leak fix for af_unix datagram getpeersec patch X-Git-Tag: v2.6.18-rc4~65^2~4 X-Git-Url: http://git.openpandora.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=dc49c1f94e3469d94b952e8f5160dd4ccd791d79;p=pandora-kernel.git [AF_UNIX]: Kernel memory leak fix for af_unix datagram getpeersec patch From: Catherine Zhang This patch implements a cleaner fix for the memory leak problem of the original unix datagram getpeersec patch. Instead of creating a security context each time a unix datagram is sent, we only create the security context when the receiver requests it. This new design requires modification of the current unix_getsecpeer_dgram LSM hook and addition of two new hooks, namely, secid_to_secctx and release_secctx. The former retrieves the security context and the latter releases it. A hook is required for releasing the security context because it is up to the security module to decide how that's done. In the case of Selinux, it's a simple kfree operation. Acked-by: Stephen Smalley Signed-off-by: David S. Miller --- Reading git-diff-tree failed