]> git.proxmox.com Git - mirror_ubuntu-hirsute-kernel.git/commit - security/selinux/hooks.c
[PATCH] SELinux: decouple fscontext/context mount options
authorEric Paris <eparis@parisplace.org>
Mon, 10 Jul 2006 11:43:53 +0000 (04:43 -0700)
committerLinus Torvalds <torvalds@g5.osdl.org>
Mon, 10 Jul 2006 20:24:13 +0000 (13:24 -0700)
commitc312feb2931ded0582378712727b7ea017a951bd
treedd985aa4dd0b759690af9557a5170dabf589d87f
parent2ed6e34f88a0d896a6f889b00693cae0fadacfd0
[PATCH] SELinux: decouple fscontext/context mount options

Remove the conflict between fscontext and context mount options.  If
context= is specified without fscontext it will operate just as before, if
both are specified we will use mount point labeling and all inodes will get
the label specified by context=.  The superblock will be labeled with the
label of fscontext=, thus affecting operations which check the superblock
security context, such as associate permissions.

Signed-off-by: Eric Paris <eparis@parisplace.org>
Acked-by: Stephen Smalley <sds@tycho.nsa.gov>
Signed-off-by: James Morris <jmorris@namei.org>
Signed-off-by: Andrew Morton <akpm@osdl.org>
Signed-off-by: Linus Torvalds <torvalds@osdl.org>
security/selinux/hooks.c
security/selinux/include/objsec.h