Commit f5c58adc authored by Ondrej Mosnáček's avatar Ondrej Mosnáček 🔒
Browse files

selinux: always allow mounting submounts



[DEBUG]
Signed-off-by: Ondrej Mosnáček's avatarOndrej Mosnacek <omosnace@redhat.com>
parent 2dcc1f3b
......@@ -3128,8 +3128,12 @@ static int selinux_sb_get_tree(struct fs_context *fc)
return rc;
/* Allow all mounts performed by the kernel */
if (fc->purpose == FS_CONTEXT_FOR_KERNEL_MOUNT)
switch (fc->purpose) {
case FS_CONTEXT_FOR_KERNEL_MOUNT:
case FS_CONTEXT_FOR_SUBMOUNT:
case FS_CONTEXT_FOR_ROOT_MOUNT:
return 0;
}
ad.type = LSM_AUDIT_DATA_DENTRY;
ad.u.dentry = fc->root;
......
Markdown is supported
0% or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment