Avoid beyond bounds copy while caching ACL
[zen-stable.git] / security / apparmor / sid.c
blobf0b34f76ebef4e55e11ebe3bb4e56051891c7a5b
1 /*
2 * AppArmor security module
4 * This file contains AppArmor security identifier (sid) manipulation fns
6 * Copyright 2009-2010 Canonical Ltd.
8 * This program is free software; you can redistribute it and/or
9 * modify it under the terms of the GNU General Public License as
10 * published by the Free Software Foundation, version 2 of the
11 * License.
14 * AppArmor allocates a unique sid for every profile loaded. If a profile
15 * is replaced it receives the sid of the profile it is replacing.
17 * The sid value of 0 is invalid.
20 #include <linux/spinlock.h>
21 #include <linux/errno.h>
22 #include <linux/err.h>
24 #include "include/sid.h"
26 /* global counter from which sids are allocated */
27 static u32 global_sid;
28 static DEFINE_SPINLOCK(sid_lock);
30 /* TODO FIXME: add sid to profile mapping, and sid recycling */
32 /**
33 * aa_alloc_sid - allocate a new sid for a profile
35 u32 aa_alloc_sid(void)
37 u32 sid;
40 * TODO FIXME: sid recycling - part of profile mapping table
42 spin_lock(&sid_lock);
43 sid = (++global_sid);
44 spin_unlock(&sid_lock);
45 return sid;
48 /**
49 * aa_free_sid - free a sid
50 * @sid: sid to free
52 void aa_free_sid(u32 sid)
54 ; /* NOP ATM */