tag | c59c3dc1f2ccfad1d35e653874887f901f08d699 | |
---|---|---|
tagger | David Howells <dhowells@redhat.com> | Thu Jun 18 14:27:08 2015 +0100 |
object | 57624907e008f566abe1eb2b752e845458bfc36b |
Overlayfs file pinning
commit | 57624907e008f566abe1eb2b752e845458bfc36b | [log] [tgz] |
---|---|---|
author | David Howells <dhowells@redhat.com> | Tue Jun 16 14:14:32 2015 +0100 |
committer | David Howells <dhowells@redhat.com> | Thu Jun 18 14:14:18 2015 +0100 |
tree | e53e91eaa122612a5385e1f225f6b4b48f143ef3 | |
parent | 0a832ee79c07b641d69cd66048ef9660a5456e49 [diff] |
SELinux: Check against union label for file operations File operations (eg. read, write) issued against a file that is attached to the lower layer of a union file needs to be checked against the union-layer label not the lower layer label. The union label is stored in the file_security_struct rather than being retrieved from one of the inodes. Signed-off-by: David Howells <dhowells@redhat.com>