tree 317dced64727a10b3ce09ca84ac8e153c7dabf77
parent e9cc0f689a7c0c9be6fed6861b3a3f49ad0e7a52
author Mat Martineau <mathew.j.martineau@linux.intel.com> 1472684743 -0700
committer Mat Martineau <mathew.j.martineau@linux.intel.com> 1491340210 -0700

KEYS: Use structure to capture key restriction function and data

Replace struct key's restrict_link function pointer with a pointer to
the new struct key_restriction. The structure contains pointers to the
restriction function as well as relevant data for evaluating the
restriction.

The garbage collector checks restrict_link->keytype when key types are
unregistered. Restrictions involving a removed key type are converted
to use restrict_link_reject so that restrictions cannot be removed by
unregistering key types.

Signed-off-by: Mat Martineau <mathew.j.martineau@linux.intel.com>