From: Eric Paris Date: Fri, 6 Jul 2012 18:13:30 +0000 (-0400) Subject: SELinux: do not check open perms if they are not known to policy X-Git-Tag: v3.5~16^2 X-Git-Url: http://git.openpandora.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=3d2195c3324b27e65ba53d9626a6bd91a2515797;p=pandora-kernel.git SELinux: do not check open perms if they are not known to policy When I introduced open perms policy didn't understand them and I implemented them as a policycap. When I added the checking of open perm to truncate I forgot to conditionalize it on the userspace defined policy capability. Running an old policy with a new kernel will not check open on open(2) but will check it on truncate. Conditionalize the truncate check the same as the open check. Signed-off-by: Eric Paris Cc: stable@vger.kernel.org # 3.4.x Signed-off-by: James Morris --- Reading git-diff-tree failed