Commit 1ac42476 authored by Paul Moore's avatar Paul Moore
Browse files

selinux: check ss_initialized before revalidating an inode label 



There is no point in trying to revalidate an inode's security label if
the security server is not yet initialized.

Signed-off-by: default avatarPaul Moore <paul@paul-moore.com>
parent 20cdef8d

security/selinux/hooks.c

+1 −1
Original line number Original line Diff line number Diff line
@@ -259,7 +259,7 @@ static int __inode_security_revalidate(struct inode *inode, 




	might_sleep_if(may_sleep);

	might_sleep_if(may_sleep);





	if (isec->initialized != LABEL_INITIALIZED) {

	if (ss_initialized && isec->initialized != LABEL_INITIALIZED) {

		if (!may_sleep)

		if (!may_sleep)

			return -ECHILD;

			return -ECHILD;