Commit f5c58adc authored by Ondrej Mosnáček's avatar Ondrej Mosnáček 🌽

selinux: always allow mounting submounts

[DEBUG]
Signed-off-by: Ondrej Mosnáček's avatarOndrej Mosnacek <[email protected]>
parent 2dcc1f3b
......@@ -3128,8 +3128,12 @@ static int selinux_sb_get_tree(struct fs_context *fc)
return rc;
/* Allow all mounts performed by the kernel */
if (fc->purpose == FS_CONTEXT_FOR_KERNEL_MOUNT)
switch (fc->purpose) {
case FS_CONTEXT_FOR_KERNEL_MOUNT:
case FS_CONTEXT_FOR_SUBMOUNT:
case FS_CONTEXT_FOR_ROOT_MOUNT:
return 0;
}
ad.type = LSM_AUDIT_DATA_DENTRY;
ad.u.dentry = fc->root;
......
Markdown is supported
0%
or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment