]> git.ipfire.org Git - thirdparty/linux.git/commitdiff
selinux: cleanup the policycap accessor functions
authorPaul Moore <paul@paul-moore.com>
Fri, 16 Jun 2023 22:02:43 +0000 (18:02 -0400)
committerPaul Moore <paul@paul-moore.com>
Mon, 10 Jul 2023 18:23:56 +0000 (14:23 -0400)
In the process of reverting back to directly accessing the global
selinux_state pointer we left behind some artifacts in the
selinux_policycap_XXX() helper functions.  This patch cleans up
some of that left-behind cruft.

Signed-off-by: Paul Moore <paul@paul-moore.com>
security/selinux/include/security.h

index 3b605f39e0401a32619d6c848672c3e5211208ca..60eb161a0e5ab954ea7eff359ff718b11223b716 100644 (file)
@@ -148,58 +148,45 @@ static inline bool checkreqprot_get(void)
 
 static inline bool selinux_policycap_netpeer(void)
 {
-       struct selinux_state *state = &selinux_state;
-
-       return READ_ONCE(state->policycap[POLICYDB_CAP_NETPEER]);
+       return READ_ONCE(selinux_state.policycap[POLICYDB_CAP_NETPEER]);
 }
 
 static inline bool selinux_policycap_openperm(void)
 {
-       struct selinux_state *state = &selinux_state;
-
-       return READ_ONCE(state->policycap[POLICYDB_CAP_OPENPERM]);
+       return READ_ONCE(selinux_state.policycap[POLICYDB_CAP_OPENPERM]);
 }
 
 static inline bool selinux_policycap_extsockclass(void)
 {
-       struct selinux_state *state = &selinux_state;
-
-       return READ_ONCE(state->policycap[POLICYDB_CAP_EXTSOCKCLASS]);
+       return READ_ONCE(selinux_state.policycap[POLICYDB_CAP_EXTSOCKCLASS]);
 }
 
 static inline bool selinux_policycap_alwaysnetwork(void)
 {
-       struct selinux_state *state = &selinux_state;
-
-       return READ_ONCE(state->policycap[POLICYDB_CAP_ALWAYSNETWORK]);
+       return READ_ONCE(selinux_state.policycap[POLICYDB_CAP_ALWAYSNETWORK]);
 }
 
 static inline bool selinux_policycap_cgroupseclabel(void)
 {
-       struct selinux_state *state = &selinux_state;
-
-       return READ_ONCE(state->policycap[POLICYDB_CAP_CGROUPSECLABEL]);
+       return READ_ONCE(selinux_state.policycap[POLICYDB_CAP_CGROUPSECLABEL]);
 }
 
 static inline bool selinux_policycap_nnp_nosuid_transition(void)
 {
-       struct selinux_state *state = &selinux_state;
-
-       return READ_ONCE(state->policycap[POLICYDB_CAP_NNP_NOSUID_TRANSITION]);
+       return READ_ONCE(
+               selinux_state.policycap[POLICYDB_CAP_NNP_NOSUID_TRANSITION]);
 }
 
 static inline bool selinux_policycap_genfs_seclabel_symlinks(void)
 {
-       struct selinux_state *state = &selinux_state;
-
-       return READ_ONCE(state->policycap[POLICYDB_CAP_GENFS_SECLABEL_SYMLINKS]);
+       return READ_ONCE(
+               selinux_state.policycap[POLICYDB_CAP_GENFS_SECLABEL_SYMLINKS]);
 }
 
 static inline bool selinux_policycap_ioctl_skip_cloexec(void)
 {
-       struct selinux_state *state = &selinux_state;
-
-       return READ_ONCE(state->policycap[POLICYDB_CAP_IOCTL_SKIP_CLOEXEC]);
+       return READ_ONCE(
+               selinux_state.policycap[POLICYDB_CAP_IOCTL_SKIP_CLOEXEC]);
 }
 
 struct selinux_policy_convert_data;