selinux: remove secondary ops call to inode_permission



Remove secondary ops call to inode_permission, which is
a noop in capabilities.

Acked-by: Serge Hallyn <serue@us.ibm.com>
Acked-by: Eric Paris <eparis@redhat.com>
Signed-off-by: James Morris <jmorris@namei.org>

parent f51115b9

security/selinux/hooks.c

+0 −5

Original line number	Diff line number	Diff line
		@@ -2681,11 +2681,6 @@ static int selinux_inode_follow_link(struct dentry dentry, struct nameidata na
		static int selinux_inode_permission(struct inode *inode, int mask)
		{
		const struct cred *cred = current_cred();
		int rc;

		rc = secondary_ops->inode_permission(inode, mask);
		if (rc)
		return rc;

		if (!mask) {
		/* No permission to check. Existence test. */