summaryrefslogtreecommitdiff
path: root/security/smack/smack.h
diff options
context:
space:
mode:
authorRafal Krypa <r.krypa@samsung.com>2016-12-13 11:25:11 +0900
committerSeung-Woo Kim <sw0312.kim@samsung.com>2016-12-15 01:14:07 -0800
commit1284208048861c60630259ee067adb6497ed2013 (patch)
treec2a758c95b142284e8c357f6c0ea9132e8e59a3a /security/smack/smack.h
parent7b2f0e497f16b52a909554c3b25e1bef66cb8a18 (diff)
Smack: fix d_instantiate logic for sockfs and pipefs
Since 4b936885a (v2.6.32) all inodes on sockfs and pipefs are disconnected. It caused filesystem specific code in smack_d_instantiate to be skipped, because all inodes on those pseudo filesystems were treated as root inodes. As a result all sockfs inodes had the Smack label set to floor. In most cases access checks for sockets use socket_smack data so the inode label is not important. But there are special cases that were broken. One example would be calling fcntl with F_SETOWN command on a socket fd. Now smack_d_instantiate expects all pipefs and sockfs inodes to be disconnected and has the logic in appropriate place. Change-Id: I87ab9fa19cea3e8df8f2c814946e56a9df20d36d Signed-off-by: Rafal Krypa <r.krypa@samsung.com> Signed-off-by: jooseong lee <jooseong.lee@samsung.com>
Diffstat (limited to 'security/smack/smack.h')
0 files changed, 0 insertions, 0 deletions