Commit c58c561f authored Dec 20, 2017 by Zhen Kong

selinux: Relocate selinux_enforcing to a separate 4k page



We need to relocate selinux_enforcing to a separate 4k page
to enable EL2 Hypervisor to monitor changes to this variable
using ARM stage 2 MMU. We will avoid getting page faults from
un-related data as the MMU granularity is configured to 4k.

Change-Id: I574f2b10af9fb46720bfbdd1a61eea7b841c2c39
Signed-off-by: Zhen Kong <zkong@codeaurora.org>

parent 436b6888

security/selinux/hooks.c

+1 −1

Original line number	Diff line number	Diff line
		@@ -98,7 +98,7 @@
		static atomic_t selinux_secmark_refcount = ATOMIC_INIT(0);

		#ifdef CONFIG_SECURITY_SELINUX_DEVELOP
		int selinux_enforcing;
		int selinux_enforcing __aligned(0x1000) __attribute__((section(".bss_rtic")));

		static int __init enforcing_setup(char *str)
		{