Commit fe547871 authored by Ondrej Mosnáček's avatar Ondrej Mosnáček 🔒
Browse files

selinux: always allow mounting submounts



[DEBUG]
Signed-off-by: Ondrej Mosnáček's avatarOndrej Mosnacek <omosnace@redhat.com>
parent 2dcc1f3b
......@@ -3128,7 +3128,8 @@ static int selinux_sb_get_tree(struct fs_context *fc)
return rc;
/* Allow all mounts performed by the kernel */
if (fc->purpose == FS_CONTEXT_FOR_KERNEL_MOUNT)
if (fc->purpose == FS_CONTEXT_FOR_KERNEL_MOUNT ||
fc->purpose == FS_CONTEXT_FOR_SUBMOUNT)
return 0;
ad.type = LSM_AUDIT_DATA_DENTRY;
......
Markdown is supported
0% or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment