iv/linux
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

selinux: simply inode label states to INVALID and INITIALIZED

Browse Source 
There really is no need for LABEL_MISSING as we really only care if
the inode's label is INVALID or INITIALIZED.  Also adjust the
revalidate code to reload the label whenever the label is not
INITIALIZED so we are less sensitive to label state in the future.

Signed-off-by: Paul Moore <paul@paul-moore.com>
This commit is contained in:
Paul Moore 2016-03-28 15:16:53 -04:00
parent 899134f2f6
commit 4b57d6bcd9
2 changed files with 3 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
security/selinux/hooks.c
View File

@ -259,7 +259,7 @@ static int __inode_security_revalidate(struct inode *inode,
might_sleep_if(may_sleep);
if (isec->initialized == LABEL_INVALID) {
if (isec->initialized != LABEL_INITIALIZED) {
if (!may_sleep)
return -ECHILD;

5
security/selinux/include/objsec.h
View File

@ -38,9 +38,8 @@ struct task_security_struct {
};
enum label_initialized {
LABEL_MISSING, /* not initialized */
LABEL_INITIALIZED, /* inizialized */
LABEL_INVALID /* invalid */
LABEL_INVALID, /* invalid or not initialized */
LABEL_INITIALIZED /* initialized */
};
struct inode_security_struct {