From: Stephen Smalley <sds@tycho.nsa.gov>
Date: Wed, 1 Feb 2006 11:05:54 +0000 (-0800)
Subject: [PATCH] selinux: fix and cleanup mprotect checks
X-Git-Tag: v2.6.16-rc2~84
X-Git-Url: http://git.openpandora.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=db4c9641def55d36a6f9df79deb8a949292313ca;p=pandora-kernel.git

[PATCH] selinux: fix and cleanup mprotect checks

Fix the SELinux mprotect checks on executable mappings so that they are not
re-applied when the mapping is already executable as well as cleaning up
the code.  This avoids a situation where e.g.  an application is prevented
from removing PROT_WRITE on an already executable mapping previously
authorized via execmem permission due to an execmod denial.

Signed-off-by: Stephen Smalley <sds@tycho.nsa.gov>
Acked-by: James Morris <jmorris@namei.org>
Signed-off-by: Andrew Morton <akpm@osdl.org>
Signed-off-by: Linus Torvalds <torvalds@osdl.org>
---

Reading git-diff-tree failed