selinux/ss/services.c

2139 				struct selinux_policy *newpolicy);
2186 	struct selinux_policy *oldpolicy, *newpolicy = load_state->policy;
2195 		if (oldpolicy->policydb.mls_enabled && !newpolicy->policydb.mls_enabled)
2197 		else if (!oldpolicy->policydb.mls_enabled && newpolicy->policydb.mls_enabled)
2203 		newpolicy->latest_granting = oldpolicy->latest_granting + 1;
2205 		newpolicy->latest_granting = 1;
2206 	seqno = newpolicy->latest_granting;
2211 		rcu_assign_pointer(state->policy, newpolicy);
2214 		rcu_assign_pointer(state->policy, newpolicy);
2218 	security_load_policycaps(newpolicy);
2254 	struct selinux_policy *newpolicy, *oldpolicy;
2259 	newpolicy = kzalloc(sizeof(*newpolicy), GFP_KERNEL);
2260 	if (!newpolicy)
2263 	newpolicy->sidtab = kzalloc(sizeof(*newpolicy->sidtab), GFP_KERNEL);
2264 	if (!newpolicy->sidtab) {
2269 	rc = policydb_read(&newpolicy->policydb, fp);
2273 	newpolicy->policydb.len = len;
2274 	rc = selinux_set_mapping(&newpolicy->policydb, secclass_map,
2275 				&newpolicy->map);
2279 	rc = policydb_load_isids(&newpolicy->policydb, newpolicy->sidtab);
2287 		load_state->policy = newpolicy;
2296 	rc = security_preserve_bools(oldpolicy, newpolicy);
2314 	convert_data->args.newp = &newpolicy->policydb;
2317 	convert_data->sidtab_params.target = newpolicy->sidtab;
2327 	load_state->policy = newpolicy;
2334 	sidtab_destroy(newpolicy->sidtab);
2336 	kfree(newpolicy->map.mapping);
2338 	policydb_destroy(&newpolicy->policydb);
2340 	kfree(newpolicy->sidtab);
2342 	kfree(newpolicy);
3029 	struct selinux_policy *newpolicy, *oldpolicy;
3043 	newpolicy = kmemdup(oldpolicy, sizeof(*newpolicy), GFP_KERNEL);
3044 	if (!newpolicy)
3051 	rc = cond_policydb_dup(&newpolicy->policydb, &oldpolicy->policydb);
3053 		kfree(newpolicy);
3060 		int old_state = newpolicy->policydb.bool_val_to_struct[i]->state;
3066 				sym_name(&newpolicy->policydb, SYM_BOOLS, i),
3071 			newpolicy->policydb.bool_val_to_struct[i]->state = new_state;
3076 	evaluate_cond_nodes(&newpolicy->policydb);
3079 	newpolicy->latest_granting = oldpolicy->latest_granting + 1;
3080 	seqno = newpolicy->latest_granting;
3083 	rcu_assign_pointer(state->policy, newpolicy);
3124 				struct selinux_policy *newpolicy)
3135 		booldatum = symtab_search(&newpolicy->policydb.p_bools,
3140 	evaluate_cond_nodes(&newpolicy->policydb);