[PATCH 1/3][RFC] SELinux: correctly detect proc filesystems of the form "proc/foo"

From: James Morris <jmorris@namei.org>
To: linux-security-module@vger.kernel.org
Cc: auke-jan.h.kok@intel.com, e1000-devel@lists.sourceforge.net,
	netdev@vger.kernel.org, Alexey Dobriyan <adobriyan@gmail.com>,
	Chris Wright <chrisw@sous-sol.org>,
	"Eric W. Biederman" <ebiederm@xmission.com>,
	Al Viro <viro@ftp.linux.org.uk>,
	Eric Paris <eparis@parisplace.org>,
	Andrew Morton <akpm@linux-foundation.org>,
	Stephen Smalley <sds@tycho.nsa.gov>,
	David Miller <davem@davemloft.net>
Subject: [PATCH 1/3][RFC] SELinux: correctly detect proc filesystems of the form "proc/foo"
Date: Fri, 19 Dec 2008 12:05:39 +1100 (EST)	[thread overview]
Message-ID: <alpine.LRH.1.10.0812191204390.4137@tundra.namei.org> (raw)
In-Reply-To: <alpine.LRH.1.10.0812191144370.4137@tundra.namei.org>

From: Stephen Smalley <sds@tycho.nsa.gov>

Map all of these proc/ filesystem types to "proc" for the policy lookup at
filesystem mount time.

Signed-off-by: James Morris <jmorris@namei.org>
---
 security/selinux/hooks.c |    2 +-
 1 files changed, 1 insertions(+), 1 deletions(-)

diff --git a/security/selinux/hooks.c b/security/selinux/hooks.c
index d337748..470763a 100644
--- a/security/selinux/hooks.c
+++ b/security/selinux/hooks.c
@@ -672,7 +672,7 @@ static int selinux_set_mnt_opts(struct super_block *sb,
 		sbsec->proc = 1;
 
 	/* Determine the labeling behavior to use for this filesystem type. */
-	rc = security_fs_use(sb->s_type->name, &sbsec->behavior, &sbsec->sid);
+	rc = security_fs_use(sbsec->proc ? "proc" : sb->s_type->name, &sbsec->behavior, &sbsec->sid);
 	if (rc) {
 		printk(KERN_WARNING "%s: security_fs_use(%s) returned %d\n",
 		       __func__, sb->s_type->name, rc);
-- 
1.6.0.4


------------------------------------------------------------------------------
SF.Net email is Sponsored by MIX09, March 18-20, 2009 in Las Vegas, Nevada.
The future of the web can't happen without you.  Join us at MIX09 to help
pave the way to the Next Web now. Learn more and register at
http://ad.doubleclick.net/clk;208669438;13503038;i?http://2009.visitmix.com/
