Stephen Smalley 0188d5c025 selinux: fall back to ref-walk if audit is required ... commit bda0be7ad9 ("security: make inode_follow_link RCU-walk aware") passed down the rcu flag to the SELinux AVC, but failed to adjust the test in slow_avc_audit() to also return -ECHILD on LSM_AUDIT_DATA_DENTRY. Previously, we only returned -ECHILD if generating an audit record with LSM_AUDIT_DATA_INODE since this was only relevant from inode_permission. Move the handling of MAY_NOT_BLOCK to avc_audit() and its inlined equivalent in selinux_inode_permission() immediately after we determine that audit is required, and always fall back to ref-walk in this case. Fixes: bda0be7ad9 ("security: make inode_follow_link RCU-walk aware") Reported-by: Will Deacon <will@kernel.org> Suggested-by: Al Viro <viro@zeniv.linux.org.uk> Signed-off-by: Stephen Smalley <sds@tycho.nsa.gov> Signed-off-by: Paul Moore <paul@paul-moore.com>		2019-12-09 18:37:47 -05:00
..
audit.h	treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 500	2019-06-19 17:09:55 +02:00
avc_ss.h	selinux: wrap AVC state	2018-03-20 16:58:17 -04:00
avc.h	selinux: fall back to ref-walk if audit is required	2019-12-09 18:37:47 -05:00
classmap.h	security,lockdown,selinux: implement SELinux lockdown	2019-12-09 17:53:58 -05:00
conditional.h	treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 372	2019-06-05 17:37:10 +02:00
ibpkey.h	treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 295	2019-06-05 17:36:38 +02:00
initial_sid_to_string.h	License cleanup: add SPDX GPL-2.0 license identifier to files with no license	2017-11-02 11:10:55 +01:00
netif.h	treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 500	2019-06-19 17:09:55 +02:00
netlabel.h	treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 13	2019-05-21 11:28:45 +02:00
netnode.h	treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 295	2019-06-05 17:36:38 +02:00
netport.h	treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 295	2019-06-05 17:36:38 +02:00
objsec.h	perf_event: Add support for LSM and SELinux checks	2019-10-17 21:31:55 +02:00
security.h	selinux: sidtab reverse lookup hash table	2019-12-09 16:14:51 -05:00
xfrm.h	security: Remove rtnl_lock() in selinux_xfrm_notify_policyload()	2018-03-29 13:47:53 -04:00