+static inline
+bool sptlrpc_sepol_update_needed(struct ptlrpc_sec *imp_sec,
+ ktime_t mtime, char *pol, size_t pol_len)
+{
+ struct sptlrpc_sepol *old;
+ bool rc;
+
+ rcu_read_lock();
+ old = rcu_dereference(imp_sec->ps_sepol);
+ if (!old)
+ rc = true;
+ else if (!kref_read(&old->ssp_ref))
+ rc = false;
+ else if (ktime_compare(old->ssp_mtime, mtime) != 0)
+ rc = true;
+ else
+ rc = false;
+ rcu_read_unlock();
+
+ return rc;
+}
+static int sptlrpc_sepol_update(struct obd_import *imp,
+ ktime_t mtime, char *pol, size_t pol_len)
+{
+ struct sptlrpc_sepol *old;
+ struct sptlrpc_sepol *new;
+ struct ptlrpc_sec *imp_sec;
+ int rc = 0;
+
+ imp_sec = sptlrpc_import_sec_ref(imp);
+ if (!imp_sec)
+ RETURN(-ENODEV);
+
+ if (!sptlrpc_sepol_update_needed(imp_sec, mtime, pol, pol_len))
+ GOTO(out, rc);
+
+ new = kmalloc(sizeof(typeof(*new)) + pol_len + 1, GFP_KERNEL);
+ if (!new)
+ GOTO(out, rc = -ENOMEM);
+
+ kref_init(&new->ssp_ref);
+ new->ssp_sepol_size = pol_len + 1;
+ new->ssp_mtime = mtime;
+ strscpy(new->ssp_sepol, pol, new->ssp_sepol_size);
+
+ spin_lock(&imp_sec->ps_lock);
+ old = rcu_dereference_protected(imp_sec->ps_sepol, 1);
+ rcu_assign_pointer(imp_sec->ps_sepol, new);
+ spin_unlock(&imp_sec->ps_lock);
+ sptlrpc_sepol_put(old);
+out:
+ sptlrpc_sec_put(imp_sec);
+
+ return rc;
+}
+