git.openpandora.org / pandora-kernel.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 94ad374) | patch
Re: BUG at security/selinux/avc.c:883 (was: Re: linux-next: Tree
authorStephen Smalley <sds@tycho.nsa.gov>
Mon, 28 Jul 2008 17:32:38 +0000 (13:32 -0400)
committerAl Viro <viro@zeniv.linux.org.uk>
Fri, 1 Aug 2008 15:25:21 +0000 (11:25 -0400)
commitf418b006079ce537daf9436215f1d2a47e451602
treec61320192312898c0b0ac2a67398d5c81613f8cbtree | snapshot
parent94ad374a0751f40d25e22e036c37f7263569d24ccommit | diff
Re: BUG at security/selinux/avc.c:883 (was: Re: linux-next: Tree
for July 17: early crash on x86-64)

SELinux needs MAY_APPEND to be passed down to the security hook.
Otherwise, we get permission denials when only append permission is
granted by policy even if the opening process specified O_APPEND.
Shows up as a regression in the ltp selinux testsuite, fixed by
this patch.

Signed-off-by: Stephen Smalley <sds@tycho.nsa.gov>
Signed-off-by: Al Viro <viro@zeniv.linux.org.uk>
fs/namei.c diff | blob | history
Pandora Kernel Repository