| commit | 026eb167ae77244458fa4b4b9fc171209c079ba7 | |
| author | Eric Paris <eparis@redhat.com> | |
| Thu, 3 Mar 2011 21:09:14 +0000 (3 16:09 -0500) | ||
| committer | Eric Paris <eparis@redhat.com> | |
| Thu, 3 Mar 2011 21:12:28 +0000 (3 16:12 -0500) | ||
| tree | 1e66fcfeb0b43a6fb764e1d07f8f0200d0c99094 | treesnapshot (tar.gz zip) |
| parent | ff36fe2c845cab2102e4826c1ffa0a6ebf487c65 | commitdiff |
SELinux: implement the new sb_remount LSM hook
For SELinux we do not allow security information to change during a remount
operation. Thus this hook simply strips the security module options from
the data and verifies that those are the same options as exist on the
current superblock.
Signed-off-by: Eric Paris <eparis@redhat.com>
Reviewed-by: James Morris <jmorris@namei.org>
For SELinux we do not allow security information to change during a remount
operation. Thus this hook simply strips the security module options from
the data and verifies that those are the same options as exist on the
current superblock.
Signed-off-by: Eric Paris <eparis@redhat.com>
Reviewed-by: James Morris <jmorris@namei.org>
| security/selinux/hooks.c | diffblobblamehistory |