Commit fe547871 authored by Ondrej Mosnáček's avatar Ondrej Mosnáček 🌽

selinux: always allow mounting submounts

[DEBUG]
Signed-off-by: Ondrej Mosnáček's avatarOndrej Mosnacek <[email protected]>
parent 2dcc1f3b
......@@ -3128,7 +3128,8 @@ static int selinux_sb_get_tree(struct fs_context *fc)
return rc;
/* Allow all mounts performed by the kernel */
if (fc->purpose == FS_CONTEXT_FOR_KERNEL_MOUNT)
if (fc->purpose == FS_CONTEXT_FOR_KERNEL_MOUNT ||
fc->purpose == FS_CONTEXT_FOR_SUBMOUNT)
return 0;
ad.type = LSM_AUDIT_DATA_DENTRY;
......
Markdown is supported
0%
or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment