Skip to content

Draft: lsm: fix behavior of security_inode_getsecctx()

Ondrej Mosnáček requested to merge omos/centos-stream-9:rhel-16573-nfs-getsecctx into main

JIRA: https://issues.redhat.com/browse/RHEL-16573

Tested: TBA

Two commits that fix the behavior of security_inode_getsecctx() when the BPF LSM is enabled along with SELinux that leads to an uninitialized variable read in NFS, which can cause NFS mounts to fail under certain conditions.

Signed-off-by: Ondrej Mosnacek omosnace@redhat.com

Merge request reports