Donate to e Foundation | Murena handsets with /e/OS | Own a part of Murena! Learn more

Commit ef57471a authored by David Howells's avatar David Howells Committed by James Morris
Browse files

SELinux: Make selinux_kernel_create_files_as() shouldn't just always return 0 



Make selinux_kernel_create_files_as() return an error when it gets one, rather
than unconditionally returning 0.

Without this, cachefiles doesn't return an error if the SELinux policy doesn't
let it create files with the label of the directory at the base of the cache.

Signed-off-by: default avatarDavid Howells <dhowells@redhat.com>
Signed-off-by: default avatarJames Morris <jmorris@namei.org>
parent 1fcdc7c5

security/selinux/hooks.c

+1 −1
Original line number Diff line number Diff line
@@ -3329,7 +3329,7 @@ static int selinux_kernel_create_files_as(struct cred *new, struct inode *inode) 


	if (ret == 0)

		tsec->create_sid = isec->sid;

	return 0;

	return ret;

}



static int selinux_kernel_module_request(char *kmod_name)