Re: [PATCH v2] lockdown,selinux: avoid bogus SELinux lockdown permission checks
From: Steven Rostedt <rostedt@goodmis.org>
Date: 2021-05-28 13:58:07
Also in:
bpf, linux-fsdevel, linux-security-module, lkml, netdev, selinux
On Mon, 17 May 2021 11:20:06 +0200 Ondrej Mosnacek [off-list ref] wrote:
quoted hunk ↗ jump to hunk
diff --git a/fs/tracefs/inode.c b/fs/tracefs/inode.c index 1261e8b41edb..7edde3fc22f5 100644 --- a/fs/tracefs/inode.c +++ b/fs/tracefs/inode.c@@ -396,7 +396,7 @@ struct dentry *tracefs_create_file(const char *name, umode_t mode, struct dentry *dentry; struct inode *inode; - if (security_locked_down(LOCKDOWN_TRACEFS)) + if (security_cred_locked_down(NULL, LOCKDOWN_TRACEFS)) return NULL; if (!(mode & S_IFMT))
Acked-by: Steven Rostedt (VMware) <rostedt@goodmis.org> -- Steve