]> git.baikalelectronics.ru Git - kernel.git/commit
selinux: default to security isid in sel_make_bools() if no sid is found
authorGary Tierney <gary.tierney@gmx.com>
Mon, 9 Jan 2017 15:07:32 +0000 (10:07 -0500)
committerPaul Moore <paul@paul-moore.com>
Mon, 9 Jan 2017 15:07:32 +0000 (10:07 -0500)
commit74c023b18803af8d64572a4d9ad6da1c0d846bcb
tree11fb58c6c970d18b21e02f86631d3dbf27c43b11
parent803903be6fbd3d3fff2de8da871780a88530d9d9
selinux: default to security isid in sel_make_bools() if no sid is found

Use SECINITSID_SECURITY as the default SID for booleans which don't have
a matching SID returned from security_genfs_sid(), also update the
error message to a warning which matches this.

This prevents the policy failing to load (and consequently the system
failing to boot) when there is no default genfscon statement matched for
the selinuxfs in the new policy.

Signed-off-by: Gary Tierney <gary.tierney@gmx.com>
Acked-by: Stephen Smalley <sds@tycho.nsa.gov>
Signed-off-by: Paul Moore <paul@paul-moore.com>
security/selinux/selinuxfs.c