selinux: constify nf_hook_ops

ArvindYadavCs · pcmoore · commit 0c3014f22dec · 2017-08-28T17:33:19.000-04:00
nf_hook_ops are not supposed to change at runtime. nf_register_net_hooks
and nf_unregister_net_hooks are working with const nf_hook_ops.
So mark the non-const nf_hook_ops structs as const.

Signed-off-by: Arvind Yadav &lt;arvind.yadav.cs@gmail.com&gt;
Signed-off-by: Paul Moore &lt;paul@paul-moore.com&gt;
diff --git a/security/selinux/hooks.c b/security/selinux/hooks.c
@@ -6550,7 +6550,7 @@ security_initcall(selinux_init);
 
 #if defined(CONFIG_NETFILTER)
 
-static struct nf_hook_ops selinux_nf_ops[] = {
+static const struct nf_hook_ops selinux_nf_ops[] = {
 	{
 		.hook =		selinux_ipv4_postroute,
 		.pf =		NFPROTO_IPV4,

Original file line number	Diff line number	Diff line change
`@@ -6550,7 +6550,7 @@ security_initcall(selinux_init);`
`6550`	`6550`
`6551`	`6551`	`#if defined(CONFIG_NETFILTER)`
`6552`	`6552`
`6553`		`-static struct nf_hook_ops selinux_nf_ops[] = {`
	`6553`	`+static const struct nf_hook_ops selinux_nf_ops[] = {`
`6554`	`6554`	`{`
`6555`	`6555`	`.hook = selinux_ipv4_postroute,`
`6556`	`6556`	`.pf = NFPROTO_IPV4,`