summaryrefslogtreecommitdiff
path: root/arch/powerpc/mm
diff options
context:
space:
mode:
authorOndrej Mosnacek <omosnace@redhat.com>2018-12-21 23:18:52 +0300
committerGreg Kroah-Hartman <gregkh@linuxfoundation.org>2019-05-08 08:20:53 +0300
commitfdffa672620989dc4e03bcf4dc644fa8bf5618bb (patch)
tree6bb8eea089f62d305e53f5f32b9dd71c0a3531fd /arch/powerpc/mm
parentea882befb39c6db2cf8f9a33ff8ceb4e45475d48 (diff)
downloadlinux-fdffa672620989dc4e03bcf4dc644fa8bf5618bb.tar.xz
selinux: never allow relabeling on context mounts
commit a83d6ddaebe541570291205cb538e35ad4ff94f9 upstream. In the SECURITY_FS_USE_MNTPOINT case we never want to allow relabeling files/directories, so we should never set the SBLABEL_MNT flag. The 'special handling' in selinux_is_sblabel_mnt() is only intended for when the behavior is set to SECURITY_FS_USE_GENFS. While there, make the logic in selinux_is_sblabel_mnt() more explicit and add a BUILD_BUG_ON() to make sure that introducing a new SECURITY_FS_USE_* forces a review of the logic. Fixes: d5f3a5f6e7e7 ("selinux: add security in-core xattr support for pstore and debugfs") Signed-off-by: Ondrej Mosnacek <omosnace@redhat.com> Reviewed-by: Stephen Smalley <sds@tycho.nsa.gov> Signed-off-by: Paul Moore <paul@paul-moore.com> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
Diffstat (limited to 'arch/powerpc/mm')
0 files changed, 0 insertions, 0 deletions