| commit | 9ce4ebed3fc214891c3b4cc821bf42b9df1feac8 | [log] [tgz] |
|---|---|---|
| author | David Howells <dhowells@redhat.com> | Thu Sep 17 17:10:53 2015 +0100 |
| committer | David Howells <dhowells@redhat.com> | Mon Sep 28 15:50:16 2015 +0100 |
| tree | c916ccaf13e788f2751f97e1aad0158f7b9a2a5b | |
| parent | 80099d9fa314e607258bf04fb1514a7806721eb3 [diff] |
SELinux: Check against union label for file operations File operations (eg. read, write) issued against a file that is attached to the lower layer of a union file needs to be checked against the union-layer label not the lower layer label. The union label is stored in the file_security_struct rather than being retrieved from one of the inodes. Signed-off-by: David Howells <dhowells@redhat.com>