diff options
author | Stephen Smalley <sds@tycho.nsa.gov> | 2008-07-28 17:32:38 (GMT) |
---|---|---|
committer | Al Viro <viro@zeniv.linux.org.uk> | 2008-08-01 15:25:21 (GMT) |
commit | f418b006079ce537daf9436215f1d2a47e451602 (patch) | |
tree | c61320192312898c0b0ac2a67398d5c81613f8cb | |
parent | 94ad374a0751f40d25e22e036c37f7263569d24c (diff) | |
download | linux-fsl-qoriq-f418b006079ce537daf9436215f1d2a47e451602.tar.xz |
Re: BUG at security/selinux/avc.c:883 (was: Re: linux-next: Tree
for July 17: early crash on x86-64)
SELinux needs MAY_APPEND to be passed down to the security hook.
Otherwise, we get permission denials when only append permission is
granted by policy even if the opening process specified O_APPEND.
Shows up as a regression in the ltp selinux testsuite, fixed by
this patch.
Signed-off-by: Stephen Smalley <sds@tycho.nsa.gov>
Signed-off-by: Al Viro <viro@zeniv.linux.org.uk>
-rw-r--r-- | fs/namei.c | 2 |
1 files changed, 1 insertions, 1 deletions
@@ -274,7 +274,7 @@ int inode_permission(struct inode *inode, int mask) return retval; return security_inode_permission(inode, - mask & (MAY_READ|MAY_WRITE|MAY_EXEC)); + mask & (MAY_READ|MAY_WRITE|MAY_EXEC|MAY_APPEND)); } /** |