proc: Pass file mode to proc_pid_make_inode
Pass the file mode of the proc inode to be created to proc_pid_make_inode. In proc_pid_make_inode, initialize inode->i_mode before calling security_task_to_inode. This allows selinux to set isec->sclass right away without introducing "half-initialized" inode security structs. Signed-off-by: Andreas Gruenbacher <agruenba@redhat.com> Signed-off-by: Paul Moore <paul@paul-moore.com>
This commit is contained in:

committed by
Paul Moore

parent
420591128c
commit
db978da8fa
@@ -3955,6 +3955,7 @@ static void selinux_task_to_inode(struct task_struct *p,
|
||||
struct inode_security_struct *isec = inode->i_security;
|
||||
u32 sid = task_sid(p);
|
||||
|
||||
isec->sclass = inode_mode_to_security_class(inode->i_mode);
|
||||
isec->sid = sid;
|
||||
isec->initialized = LABEL_INITIALIZED;
|
||||
}
|
||||
|
Reference in New Issue
Block a user