projects / GitHub / moto-9609 / android_kernel_motorola_exynos9610.git / commitdiff
? search:
summary | shortlog | log | commit | commitdiff | tree
raw | patch | inline | side by side (parent: 20cdef8)
selinux: check ss_initialized before revalidating an inode label
authorPaul Moore <paul@paul-moore.com>
Mon, 18 Apr 2016 20:41:38 +0000 (16:41 -0400)
committerPaul Moore <paul@paul-moore.com>
Tue, 19 Apr 2016 20:37:27 +0000 (16:37 -0400)
There is no point in trying to revalidate an inode's security label if
the security server is not yet initialized.

Signed-off-by: Paul Moore <paul@paul-moore.com>
security/selinux/hooks.c patch | blob | blame | history

diff --git a/security/selinux/hooks.c b/security/selinux/hooks.c
index b09aad7ad42398e0ec7d9ba176ffe2ae0a61f9ad..474011c46bbd8f35d9abadeebcb1f392989b1a05 100644 (file)
--- a/security/selinux/hooks.c
+++ b/security/selinux/hooks.c
@@ -259,7 +259,7 @@ static int __inode_security_revalidate(struct inode *inode,
 
        might_sleep_if(may_sleep);
 
-       if (isec->initialized != LABEL_INITIALIZED) {
+       if (ss_initialized && isec->initialized != LABEL_INITIALIZED) {
                if (!may_sleep)
                        return -ECHILD;