diff options
| author | Eric Paris | 2012-07-06 20:13:30 +0200 |
|---|---|---|
| committer | James Morris | 2012-07-16 03:41:47 +0200 |
| commit | 3d2195c3324b27e65ba53d9626a6bd91a2515797 (patch) | |
| tree | c17445689c2926fa446c9bef4f5b169b60ce4f15 /Kbuild | |
| parent | SELinux: include definition of new capabilities (diff) | |
| download | kernel-qcow2-linux-3d2195c3324b27e65ba53d9626a6bd91a2515797.tar.gz kernel-qcow2-linux-3d2195c3324b27e65ba53d9626a6bd91a2515797.tar.xz kernel-qcow2-linux-3d2195c3324b27e65ba53d9626a6bd91a2515797.zip | |
SELinux: do not check open perms if they are not known to policy
When I introduced open perms policy didn't understand them and I
implemented them as a policycap. When I added the checking of open perm
to truncate I forgot to conditionalize it on the userspace defined
policy capability. Running an old policy with a new kernel will not
check open on open(2) but will check it on truncate. Conditionalize the
truncate check the same as the open check.
Signed-off-by: Eric Paris <eparis@redhat.com>
Cc: stable@vger.kernel.org # 3.4.x
Signed-off-by: James Morris <james.l.morris@oracle.com>
Diffstat (limited to 'Kbuild')
0 files changed, 0 insertions, 0 deletions