On 01/07/2013 12:50 AM, Jakub Hrozek wrote:
I tried to move the whole PAM processing from the provider into the
responder but stumbled upon several things that had to be refactored in
order to make the code right. These two patches are a start, the next
phase should be getting rid of the per-request score.
So far these patches are intended for master only and their review has
lower priority than reviewing any of the patches targeted for 1.9 as
well.
[PATCH 1/2] PAM: Split SELinux processing into a separate module
No functional change, the SELinux processing just began to occupy a
substantial part of the PAM code, so it had to be split into its own
file.
[PATCH 2/2] PAM: reuse existing code for reading selinux config
The PAM processing reimplemented splitting on separator for no good
reason. This patch utilizes the existing code to reduce code
duplication.
Upcoming changes in SELinux processing will make these patches obsolete.
No need to push them.
Thanks,
Michal