Re: [PATCH v2] lockdown,selinux: avoid bogus SELinux lockdown permission checks

From
Steven Rostedt <rostedt@goodmis.org>
Date
2021-05-28 13:58:07
Also in
bpf, linux-fsdevel, linuxppc-dev, lkml, netdev, selinux
Reply to
Ondrej Mosnacek, 2021-05-17
On Mon, 17 May 2021 11:20:06 +0200
Ondrej Mosnacek [off-list ref] wrote:
quoted hunk ↗ jump to hunk
diff --git a/fs/tracefs/inode.c b/fs/tracefs/inode.c
index 1261e8b41edb..7edde3fc22f5 100644
--- a/fs/tracefs/inode.c
+++ b/fs/tracefs/inode.c
@@ -396,7 +396,7 @@ struct dentry *tracefs_create_file(const char *name, umode_t mode,
 	struct dentry *dentry;
 	struct inode *inode;
 
-	if (security_locked_down(LOCKDOWN_TRACEFS))
+	if (security_cred_locked_down(NULL, LOCKDOWN_TRACEFS))
 		return NULL;
 
 	if (!(mode & S_IFMT))
Acked-by: Steven Rostedt (VMware) <rostedt@goodmis.org>

-- Steve
Thread (37 messages) 37 messages, 10 authors, last reply 2021-06-09
Keyboard shortcuts
hback out one level
jnext message in thread / next series-diff position
kprevious message in thread / previous series-diff position
ldrill in
Escclose help / fold thread tree
?toggle this help