Commit df61ff22 authored Oct 29, 2020 by Preeti Nagar

RTIC: Move selinux_state to a separate 4k



We need to relocate selinux_state to a separate 4k page
to enable EL2 Hypervisor to monitor changes to this
variable using ARM stage 2 MMU. We will avoid getting
page faults from un-related data as the MMU granularity
is configured to 4k.

Change-Id: I67ed3d994d6df473ade968dca3f96a7aee3afa2d
Signed-off-by: Preeti Nagar <pnagar@codeaurora.org>

parent 101cbbfe

security/selinux/hooks.c

+2 −2

Original line number	Diff line number	Diff line
		@@ -98,13 +98,13 @@
		#include "audit.h"
		#include "avc_ss.h"

		struct selinux_state selinux_state;
		struct selinux_state selinux_state __rticdata;

		/* SECMARK reference count */
		static atomic_t selinux_secmark_refcount = ATOMIC_INIT(0);

		#ifdef CONFIG_SECURITY_SELINUX_DEVELOP
		static int selinux_enforcing_boot __rticdata;
		static int selinux_enforcing_boot;

		static int __init enforcing_setup(char *str)
		{