tree c916ccaf13e788f2751f97e1aad0158f7b9a2a5b
parent 80099d9fa314e607258bf04fb1514a7806721eb3
author David Howells <dhowells@redhat.com> 1442506253 +0100
committer David Howells <dhowells@redhat.com> 1443451816 +0100

SELinux: Check against union label for file operations

File operations (eg. read, write) issued against a file that is attached to
the lower layer of a union file needs to be checked against the union-layer
label not the lower layer label.

The union label is stored in the file_security_struct rather than being
retrieved from one of the inodes.

Signed-off-by: David Howells <dhowells@redhat.com>