From 89c86576ecde504da1eeb4f4882b2189ac2f9c4a Mon Sep 17 00:00:00 2001
From: Thomas Liu <tliu@redhat.com>
Date: Wed, 24 Jun 2009 17:58:05 -0400
Subject: selinux: clean up avc node cache when disabling selinux

Added a call to free the avc_node_cache when inside selinux_disable because
it should not waste resources allocated during avc_init if SELinux is disabled
and the cache will never be used.

Signed-off-by: Thomas Liu <tliu@redhat.com>
Acked-by: Eric Paris <eparis@redhat.com>
Signed-off-by: James Morris <jmorris@namei.org>
---
 security/selinux/avc.c | 6 ++++++
 1 file changed, 6 insertions(+)

(limited to 'security/selinux/avc.c')

diff --git a/security/selinux/avc.c b/security/selinux/avc.c
index 7823e84dbe8..236aaa2ea86 100644
--- a/security/selinux/avc.c
+++ b/security/selinux/avc.c
@@ -970,3 +970,9 @@ u32 avc_policy_seqno(void)
 {
 	return avc_cache.latest_notif;
 }
+
+void avc_disable(void)
+{
+	if (avc_node_cachep)
+		kmem_cache_destroy(avc_node_cachep);
+}
-- 
cgit v1.2.3