diff mbox

selinux: check ss_initialized before revalidating an inode label

Message ID 146109951681.27582.1227236515167711599.stgit@localhost (mailing list archive)
State Accepted
Headers show

Commit Message

Paul Moore April 19, 2016, 8:58 p.m. UTC 
From: Paul Moore <paul@paul-moore.com>

There is no point in trying to revalidate an inode's security label if
the security server is not yet initialized.

Signed-off-by: Paul Moore <paul@paul-moore.com>
---
 security/selinux/hooks.c |    2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)
diff mbox

Patch

diff --git a/security/selinux/hooks.c b/security/selinux/hooks.c
index b09aad7..474011c 100644
--- a/security/selinux/hooks.c
+++ b/security/selinux/hooks.c
@@ -259,7 +259,7 @@  static int __inode_security_revalidate(struct inode *inode,
 
 	might_sleep_if(may_sleep);
 
-	if (isec->initialized != LABEL_INITIALIZED) {
+	if (ss_initialized && isec->initialized != LABEL_INITIALIZED) {
 		if (!may_sleep)
 			return -ECHILD;