linux/security/selinux
Michal Hocko 97557d1615 selinux: use GFP_NOWAIT in the AVC kmem_caches
commit 476accbe2f upstream.

There is a strange __GFP_NOMEMALLOC usage pattern in SELinux,
specifically GFP_ATOMIC | __GFP_NOMEMALLOC which doesn't make much
sense.  GFP_ATOMIC on its own allows to access memory reserves while
__GFP_NOMEMALLOC dictates we cannot use memory reserves.  Replace this
with the much more sane GFP_NOWAIT in the AVC code as we can tolerate
memory allocation failures in that code.

Signed-off-by: Michal Hocko <mhocko@kernel.org>
Acked-by: Mel Gorman <mgorman@suse.de>
Signed-off-by: Paul Moore <paul@paul-moore.com>
Signed-off-by: Amit Pundir <amit.pundir@linaro.org>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
2018-09-19 22:48:56 +02:00
..
include
ss selinux: KASAN: slab-out-of-bounds in xattr_getsecurity 2018-06-06 16:46:21 +02:00
.gitignore
avc.c selinux: use GFP_NOWAIT in the AVC kmem_caches 2018-09-19 22:48:56 +02:00
exports.c
hooks.c selinux: do not check open permission on sockets 2018-04-13 19:50:10 +02:00
Kconfig
Makefile
netif.c
netlabel.c net: add skb_to_full_sk() helper and use it in selinux_netlbl_skbuff_setsid() 2015-11-08 20:56:38 -05:00
netlink.c
netnode.c
netport.c
nlmsgtab.c
selinuxfs.c
xfrm.c