selinux: make better use of the nf_hook_state passed to the NF hooks
authorPaul Moore <paul@paul-moore.com>
Mon, 11 Oct 2021 21:50:48 +0000 (17:50 -0400)
committerPaul Moore <paul@paul-moore.com>
Wed, 13 Oct 2021 20:31:18 +0000 (16:31 -0400)
commit1d1e1ded13568be81a0e19d228e310a48997bec8
tree94ffdd7ec1c8ca8fd1d84c59c1a8155f8799ce89
parentcbfcd13be5cb2a07868afe67520ed181956579a7
selinux: make better use of the nf_hook_state passed to the NF hooks

This patch builds on a previous SELinux/netfilter patch by Florian
Westphal and makes better use of the nf_hook_state variable passed
into the SELinux/netfilter hooks as well as a number of other small
cleanups in the related code.

Signed-off-by: Paul Moore <paul@paul-moore.com>
security/selinux/hooks.c