[PATCH] SELinux: add security_task_movememory calls to mm code

This patch inserts security_task_movememory hook calls into memory management
code to enable security modules to mediate this operation between tasks.

Since the last posting, the hook has been renamed following feedback from
Christoph Lameter.

Signed-off-by: David Quigley <[e-mail]>
Acked-by: Stephen Smalley <[e-mail]>
Signed-off-by: James Morris <[e-mail]>
Cc: Andi Kleen <[e-mail]>
Acked-by: Christoph Lameter <[e-mail]>
Acked-by: Chris Wright <[e-mail]>
Signed-off-by: Andrew Morton <[e-mail]>
Signed-off-by: Linus Torvalds <[e-mail]>

mm/mempolicy.c

···
 #include <linux/proc_fs.h>
 #include <linux/migrate.h>
 #include <linux/rmap.h>
+#include <linux/security.h>
 
 #include <asm/tlbflush.h>
 #include <asm/uaccess.h>
···
 		err = -EPERM;
 		goto out;
 	}
+
+	err = security_task_movememory(task);
+	if (err)
+		goto out;
 
 	err = do_migrate_pages(mm, &old, &new,
 		capable(CAP_SYS_NICE) ? MPOL_MF_MOVE_ALL : MPOL_MF_MOVE);

mm/migrate.c

···
 #include <linux/writeback.h>
 #include <linux/mempolicy.h>
 #include <linux/vmalloc.h>
+#include <linux/security.h>
 
 #include "internal.h"
 
···
 		err = -EPERM;
 		goto out2;
 	}
+
+ 	err = security_task_movememory(task);
+ 	if (err)
+ 		goto out2;
+
 
 	task_nodes = cpuset_mems_allowed(task);