[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

[PATCH v1 1/2] flask: add const qualifier to security_context_to_sid()


  • To: "xen-devel@xxxxxxxxxxxxxxxxxxxx" <xen-devel@xxxxxxxxxxxxxxxxxxxx>
  • From: Sergiy Kibrik <Sergiy_Kibrik@xxxxxxxx>
  • Date: Thu, 27 Aug 2026 09:38:01 +0000
  • Accept-language: en-US
  • Arc-authentication-results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=epam.com; dmarc=pass action=none header.from=epam.com; dkim=pass header.d=epam.com; arc=none
  • Arc-message-signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector10001; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=gwmCA8Q9O7G1J/I8ZQMK0FpJAXxpRT2z/dIkKHMIEdY=; b=csHwo+VSS0KUxEI9e2YVMRZZPLSd386074dr+e3pm5JRhGnysqOU1ik9zzYgt0zys6FShPPd1Im2qm/IuA3yE/qbhQJsTxW0otFrTGH2ghnXx1AL2915bb/XVxEOKBcs769GpFTyoy3C4rzlwtneIAu/QzAuqk3LFVEAHCNfwLXU6hI8wPJu0YjuO1+fY1wAeIe2igd72hPanUNUHZxRn06aJm/GeSGbWG7rMIn9gsM7KrG+sB2RRcM4CUxGpXaLf6XHWvuXRzGR3Nyv+kPnk6PfQrcih4HT92CA9yzmYgt8AvqyRV+qAH3PO8aODujfYSrVtK65BUccvjmCIBkkVg==
  • Arc-seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none; b=th+imLn7P8Q4jh7KHsShJh9bDfhhF4qcaVWVKV/Mmyum/waR3DlgS/OTMSi5ki5WWt4UXO6tRSP4TgWP+xqdLV1jo6wISULkmQA2MnWr0YvxsFK0di8lL9tG883+LCJCYxvvvwQpJaMsywGEQsly+JhqztR6K4uag0+2a6tjaWB8pR9i2qB7RU2ikVvOyA8Hc0ikRH8TBYfk57nwRl0ZDHBOz0LJaIhgTcplJkR283tIvD8yvZlJkpSs+ylSNKVs012B//giFi7CpunKSja/3vx43C5T/twuhJKZ9BmV60TZ79kQ/cvilHWMGd1lXetPjekAHjbPrbGsgZlyT2LNcA==
  • Authentication-results: eu.smtp.expurgate.cloud; dkim=pass header.s=selector1 header.d=epam.com header.i="@epam.com" header.h="From:Date:Subject:Message-ID:Content-Type:MIME-Version:x-ms-exchange-senderadcheck"
  • Authentication-results: dkim=none (message not signed) header.d=none;dmarc=none action=none header.from=epam.com;
  • Cc: Sergiy Kibrik <Sergiy_Kibrik@xxxxxxxx>, "Daniel P. Smith" <dpsmith@xxxxxxxxxxxxxxxxxxxx>
  • Delivery-date: Thu, 27 Aug 2026 09:38:09 +0000
  • List-id: Xen developer discussion <xen-devel.lists.xenproject.org>
  • Thread-index: AQHdNgfAVxs877kedUqP8J7OTWLOvA==
  • Thread-topic: [PATCH v1 1/2] flask: add const qualifier to security_context_to_sid()

The function does not modify context argument.
Also it gives more flexibility to this API usage, because some context strings
in Xen are also const char*.

Signed-off-by: Sergiy Kibrik <Sergiy_Kibrik@xxxxxxxx>
---
 xen/xsm/flask/include/security.h | 2 +-
 xen/xsm/flask/ss/services.c      | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/xen/xsm/flask/include/security.h b/xen/xsm/flask/include/security.h
index ec8b442a8f..a2c5f423f8 100644
--- a/xen/xsm/flask/include/security.h
+++ b/xen/xsm/flask/include/security.h
@@ -76,7 +76,7 @@ int security_change_sid(u32 ssid, u32 tsid, u16 tclass, u32 
*out_sid);
 
 int security_sid_to_context(u32 sid, char **scontext, u32 *scontext_len);
 
-int security_context_to_sid(char *scontext, u32 scontext_len, u32 *out_sid);
+int security_context_to_sid(const char *scontext, u32 scontext_len, u32 
*out_sid);
 
 int security_get_allow_unknown(void);
 
diff --git a/xen/xsm/flask/ss/services.c b/xen/xsm/flask/ss/services.c
index 35ad1034ca..764ac7d1d8 100644
--- a/xen/xsm/flask/ss/services.c
+++ b/xen/xsm/flask/ss/services.c
@@ -813,7 +813,7 @@ out:
  * Returns -%EINVAL if the context is invalid, -%ENOMEM if insufficient
  * memory is available, or 0 on success.
  */
-int security_context_to_sid(char *scontext, u32 scontext_len, u32 *sid)
+int security_context_to_sid(const char *scontext, u32 scontext_len, u32 *sid)
 {
     char *scontext2;
     struct context context;
-- 
2.43.0

 


Rackspace

Lists.xenproject.org is hosted with RackSpace, monitoring our
servers 24x7x365 and backed by RackSpace's Fanatical Support®.