summaryrefslogtreecommitdiffstats
path: root/security
diff options
context:
space:
mode:
authorEric Biggers <ebiggers@google.com>2017-03-26 00:15:37 -0400
committerAl Viro <viro@zeniv.linux.org.uk>2017-04-26 23:54:06 -0400
commitcda37124f4e95ad5ccb11394a5802b0972668b32 (patch)
treea4c51e172c57885b2edf4f74c797aa4918097d76 /security
parenta0c111b49bbe11c3970bc668600e3b61fbbb7fca (diff)
fs: constify tree_descr arrays passed to simple_fill_super()
simple_fill_super() is passed an array of tree_descr structures which describe the files to create in the filesystem's root directory. Since these arrays are never modified intentionally, they should be 'const' so that they are placed in .rodata and benefit from memory protection. This patch updates the function signature and all users, and also constifies tree_descr.name. Signed-off-by: Eric Biggers <ebiggers@google.com> Signed-off-by: Al Viro <viro@zeniv.linux.org.uk>
Diffstat (limited to 'security')
-rw-r--r--security/inode.c2
-rw-r--r--security/selinux/selinuxfs.c4
-rw-r--r--security/smack/smackfs.c2
3 files changed, 4 insertions, 4 deletions
diff --git a/security/inode.c b/security/inode.c
index 2cb14162ff8d..eccd58ef2ae8 100644
--- a/security/inode.c
+++ b/security/inode.c
@@ -28,7 +28,7 @@ static int mount_count;
28 28
29static int fill_super(struct super_block *sb, void *data, int silent) 29static int fill_super(struct super_block *sb, void *data, int silent)
30{ 30{
31 static struct tree_descr files[] = {{""}}; 31 static const struct tree_descr files[] = {{""}};
32 32
33 return simple_fill_super(sb, SECURITYFS_MAGIC, files); 33 return simple_fill_super(sb, SECURITYFS_MAGIC, files);
34} 34}
diff --git a/security/selinux/selinuxfs.c b/security/selinux/selinuxfs.c
index cb3fd98fb05a..6a9efedf7eb2 100644
--- a/security/selinux/selinuxfs.c
+++ b/security/selinux/selinuxfs.c
@@ -1496,7 +1496,7 @@ static const struct file_operations sel_avc_cache_stats_ops = {
1496static int sel_make_avc_files(struct dentry *dir) 1496static int sel_make_avc_files(struct dentry *dir)
1497{ 1497{
1498 int i; 1498 int i;
1499 static struct tree_descr files[] = { 1499 static const struct tree_descr files[] = {
1500 { "cache_threshold", 1500 { "cache_threshold",
1501 &sel_avc_cache_threshold_ops, S_IRUGO|S_IWUSR }, 1501 &sel_avc_cache_threshold_ops, S_IRUGO|S_IWUSR },
1502 { "hash_stats", &sel_avc_hash_stats_ops, S_IRUGO }, 1502 { "hash_stats", &sel_avc_hash_stats_ops, S_IRUGO },
@@ -1805,7 +1805,7 @@ static int sel_fill_super(struct super_block *sb, void *data, int silent)
1805 struct inode *inode; 1805 struct inode *inode;
1806 struct inode_security_struct *isec; 1806 struct inode_security_struct *isec;
1807 1807
1808 static struct tree_descr selinux_files[] = { 1808 static const struct tree_descr selinux_files[] = {
1809 [SEL_LOAD] = {"load", &sel_load_ops, S_IRUSR|S_IWUSR}, 1809 [SEL_LOAD] = {"load", &sel_load_ops, S_IRUSR|S_IWUSR},
1810 [SEL_ENFORCE] = {"enforce", &sel_enforce_ops, S_IRUGO|S_IWUSR}, 1810 [SEL_ENFORCE] = {"enforce", &sel_enforce_ops, S_IRUGO|S_IWUSR},
1811 [SEL_CONTEXT] = {"context", &transaction_ops, S_IRUGO|S_IWUGO}, 1811 [SEL_CONTEXT] = {"context", &transaction_ops, S_IRUGO|S_IWUGO},
diff --git a/security/smack/smackfs.c b/security/smack/smackfs.c
index 366b8356f75b..f6482e53d55a 100644
--- a/security/smack/smackfs.c
+++ b/security/smack/smackfs.c
@@ -2855,7 +2855,7 @@ static int smk_fill_super(struct super_block *sb, void *data, int silent)
2855 int rc; 2855 int rc;
2856 struct inode *root_inode; 2856 struct inode *root_inode;
2857 2857
2858 static struct tree_descr smack_files[] = { 2858 static const struct tree_descr smack_files[] = {
2859 [SMK_LOAD] = { 2859 [SMK_LOAD] = {
2860 "load", &smk_load_ops, S_IRUGO|S_IWUSR}, 2860 "load", &smk_load_ops, S_IRUGO|S_IWUSR},
2861 [SMK_CIPSO] = { 2861 [SMK_CIPSO] = {