tree 30a9b4b4ca1d4cf2b74d76b9898e5a06d9802eb0
parent 356f640f6c2c3f594b609ad65eece605ab55ba49
author Mimi Zohar <zohar@linux.vnet.ibm.com> 1451478930 -0500
committer Mimi Zohar <zohar@linux.vnet.ibm.com> 1452696561 -0500

module: replace copy_module_from_fd with kernel version

This patch replaces the module copy_module_from_fd() call with the VFS
common kernel_read_file_from_fd() function.  Instead of reading the
kernel module twice, once for measuring/appraising and then loading
the kernel module, the file is read once.

This patch defines a new security hook named security_kernel_read_file(),
which is called before reading the file.  For now, call the module
security hook from security_kernel_read_file until the LSMs have been
converted to use the kernel_read_file hook.

This patch retains the kernel_module_from_file hook, but removes the
security_kernel_module_from_file() function.

Signed-off-by: Mimi Zohar <zohar@linux.vnet.ibm.com>