ima: refactor ima_policy_show() to display "ima_hooks" rules

Define and call a function to display the "ima_hooks" rules.
Signed-off-by: NMimi Zohar <zohar@linux.vnet.ibm.com>
Acked-by: NPetko Manolov <petkan@mip-labs.com>
Acked-by: NDmitry Kasatkin <dmitry.kasatkin@huawei.com>

security/integrity/ima/ima_policy.c

@@ -903,29 +903,14 @@ void ima_policy_stop(struct seq_file *m, void *v)
 #define mt(token)	mask_tokens[token]
 #define ft(token)	func_tokens[token]
 
-int ima_policy_show(struct seq_file *m, void *v)
+/*
+ * policy_func_show - display the ima_hooks policy rule
+ */
+static void policy_func_show(struct seq_file *m, enum ima_hooks func)
 {
-	struct ima_rule_entry *entry = v;
-	int i = 0;
 	char tbuf[64] = {0,};
 
-	rcu_read_lock();
-
-	if (entry->action & MEASURE)
-		seq_puts(m, pt(Opt_measure));
-	if (entry->action & DONT_MEASURE)
-		seq_puts(m, pt(Opt_dont_measure));
-	if (entry->action & APPRAISE)
-		seq_puts(m, pt(Opt_appraise));
-	if (entry->action & DONT_APPRAISE)
-		seq_puts(m, pt(Opt_dont_appraise));
-	if (entry->action & AUDIT)
-		seq_puts(m, pt(Opt_audit));
-
-	seq_puts(m, " ");
-
-	if (entry->flags & IMA_FUNC) {
-		switch (entry->func) {
+	switch (func) {
 	case FILE_CHECK:
 		seq_printf(m, pt(Opt_func), ft(func_file));
 		break;
@@ -945,12 +930,36 @@ int ima_policy_show(struct seq_file *m, void *v)
 		seq_printf(m, pt(Opt_func), ft(func_post));
 		break;
 	default:
-			snprintf(tbuf, sizeof(tbuf), "%d", entry->func);
+		snprintf(tbuf, sizeof(tbuf), "%d", func);
 		seq_printf(m, pt(Opt_func), tbuf);
 		break;
 	}
 	seq_puts(m, " ");
-	}
+}
+
+int ima_policy_show(struct seq_file *m, void *v)
+{
+	struct ima_rule_entry *entry = v;
+	int i = 0;
+	char tbuf[64] = {0,};
+
+	rcu_read_lock();
+
+	if (entry->action & MEASURE)
+		seq_puts(m, pt(Opt_measure));
+	if (entry->action & DONT_MEASURE)
+		seq_puts(m, pt(Opt_dont_measure));
+	if (entry->action & APPRAISE)
+		seq_puts(m, pt(Opt_appraise));
+	if (entry->action & DONT_APPRAISE)
+		seq_puts(m, pt(Opt_dont_appraise));
+	if (entry->action & AUDIT)
+		seq_puts(m, pt(Opt_audit));
+
+	seq_puts(m, " ");
+
+	if (entry->flags & IMA_FUNC)
+		policy_func_show(m, entry->func);
 
 	if (entry->flags & IMA_MASK) {
 		if (entry->mask & MAY_EXEC)