selinux: revert "stop passing MAY_NOT_BLOCK to the AVC upon follow_link"

Browse source

commit 1a37079c23 upstream.

This reverts commit e46e01eebb ("selinux: stop passing MAY_NOT_BLOCK
to the AVC upon follow_link"). The correct fix is to instead fall
back to ref-walk if audit is required irrespective of the specific
audit data type.  This is done in the next commit.

Fixes: e46e01eebb ("selinux: stop passing MAY_NOT_BLOCK to the AVC upon follow_link")
Reported-by: Will Deacon <will@kernel.org>
Signed-off-by: Stephen Smalley <sds@tycho.nsa.gov>
Signed-off-by: Paul Moore <paul@paul-moore.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>

...

This commit is contained in:

Stephen Smalley 2019-11-22 12:22:44 -05:00 • committed by Greg Kroah-Hartman

parent 8cec0fa222

commit f08a5e60bc

3 changed files with 30 additions and 4 deletions

Show all changes Ignore whitespace when comparing lines Ignore changes in amount of whitespace Ignore changes in whitespace at EOL

Download patch file Download diff file Expand all files Collapse all files

24

security/selinux/avc.c

View file

5

security/selinux/hooks.c

View file

5

security/selinux/include/avc.h

View file