[Version,3,03/16] SELINUX export security_current_sid_to_context

Commit Message

Andy Adamson Dec. 23, 2016, 4:04 p.m. UTC

From: Andy Adamson <[e-mail]>

RPCSEC_GSS Version 3 label assertions require the client thread
sid in string context form

Signed-off-by: Andy Adamson <[e-mail]>
---
 include/linux/selinux.h  |  1 +
 security/selinux/hooks.c | 12 ++++++++++++
 2 files changed, 13 insertions(+)

Patch

diff --git a/include/linux/selinux.h b/include/linux/selinux.h
index 44f4596..3dfaf41 100644
--- a/include/linux/selinux.h
+++ b/include/linux/selinux.h
@@ -24,6 +24,7 @@ 
  * selinux_is_enabled - is SELinux enabled?
  */
 bool selinux_is_enabled(void);
+int security_current_sid_to_context(char **scontext, u32 *scontext_len);
 #else
 
 static inline bool selinux_is_enabled(void)
diff --git a/security/selinux/hooks.c b/security/selinux/hooks.c
index 09fd610..f355c49 100644
--- a/security/selinux/hooks.c
+++ b/security/selinux/hooks.c
@@ -6463,3 +6463,15 @@  int selinux_disable(void)
 	return 0;
 }
 #endif
+
+/**
+ * RPCSEC_GSS Version 3 Full Mode labeling needs this interface
+ * or one like it.
+ */
+int security_current_sid_to_context(char **scontext, u32 *scontext_len)
+{
+	const struct task_security_struct *ts = current_security();
+
+	return security_sid_to_context(ts->sid, scontext, scontext_len);
+}
+EXPORT_SYMBOL_GPL(security_current_sid_to_context);