Explorar o código

Re: BUG at security/selinux/avc.c:883 (was: Re: linux-next: Tree
for July 17: early crash on x86-64)

SELinux needs MAY_APPEND to be passed down to the security hook.
Otherwise, we get permission denials when only append permission is
granted by policy even if the opening process specified O_APPEND.
Shows up as a regression in the ltp selinux testsuite, fixed by
this patch.

Signed-off-by: Stephen Smalley <sds@tycho.nsa.gov>
Signed-off-by: Al Viro <viro@zeniv.linux.org.uk>

Stephen Smalley %!s(int64=17) %!d(string=hai) anos
pai
achega
f418b00607
Modificáronse 1 ficheiros con 1 adicións e 1 borrados
  1. 1 1
      fs/namei.c

+ 1 - 1
fs/namei.c

@@ -274,7 +274,7 @@ int inode_permission(struct inode *inode, int mask)
 		return retval;
 		return retval;
 
 
 	return security_inode_permission(inode,
 	return security_inode_permission(inode,
-			mask & (MAY_READ|MAY_WRITE|MAY_EXEC));
+			mask & (MAY_READ|MAY_WRITE|MAY_EXEC|MAY_APPEND));
 }
 }
 
 
 /**
 /**