Commit 64f18f8a authored by Xiu Jianfeng's avatar Xiu Jianfeng Committed by Paul Moore
Browse files

selinux: update comment on selinux_hooks[] 



After commit f22f9aaf ("selinux: remove the runtime disable
functionality"), the comment on selinux_hooks[] is out-of-date,
remove the last paragraph about runtime disable functionality.

Signed-off-by: default avatarXiu Jianfeng <xiujianfeng@huawei.com>
Signed-off-by: default avatarPaul Moore <paul@paul-moore.com>
parent c50e125d

security/selinux/hooks.c

+0 −4
Original line number Diff line number Diff line
@@ -6963,10 +6963,6 @@ static int selinux_uring_cmd(struct io_uring_cmd *ioucmd) 
 *    hooks ("allocating" hooks).

 *

 * Please follow block comment delimiters in the list to keep this order.

 *

 * This ordering is needed for SELinux runtime disable to work at least somewhat

 * safely. Breaking the ordering rules above might lead to NULL pointer derefs

 * when disabling SELinux at runtime.

 */

static struct security_hook_list selinux_hooks[] __ro_after_init = {

	LSM_HOOK_INIT(binder_set_context_mgr, selinux_binder_set_context_mgr),