selinux: remove ptrace_sid
authorRoland McGrath <roland@redhat.com>
Wed, 26 Mar 2008 22:46:39 +0000 (15:46 -0700)
committerJames Morris <jmorris@namei.org>
Fri, 18 Apr 2008 10:26:10 +0000 (20:26 +1000)
commit0356357c5158c71d4cbf20196b2f784435dd916c
treee680a4d0346286d2c318bb20914cceabc0596af1
parenteda4f69ca5a532b425db5a6c2c6bc50717b9b5fe
selinux: remove ptrace_sid

This changes checks related to ptrace to get rid of the ptrace_sid tracking.
It's good to disentangle the security model from the ptrace implementation
internals.  It's sufficient to check against the SID of the ptracer at the
time a tracee attempts a transition.

Signed-off-by: Roland McGrath <roland@redhat.com>
Acked-by: Stephen Smalley <sds@tycho.nsa.gov>
Signed-off-by: James Morris <jmorris@namei.org>
security/selinux/hooks.c
security/selinux/include/objsec.h