diff options
| author | Christian Brauner <christian.brauner@ubuntu.com> | 2021-01-21 14:19:45 +0100 |
|---|---|---|
| committer | Christian Brauner <christian.brauner@ubuntu.com> | 2021-01-24 14:27:20 +0100 |
| commit | a2d2329e30e224ea68d575d2525b866df9805ea0 (patch) | |
| tree | 5c56b6472bcb77840030918e5d0ea28077762365 /security/selinux/Makefile | |
| parent | 3cee6079f62f4d3a37d9dda2e0851677e08028ff (diff) | |
| download | linux-stable-a2d2329e30e224ea68d575d2525b866df9805ea0.tar.gz linux-stable-a2d2329e30e224ea68d575d2525b866df9805ea0.tar.bz2 linux-stable-a2d2329e30e224ea68d575d2525b866df9805ea0.zip | |
ima: handle idmapped mounts
IMA does sometimes access the inode's i_uid and compares it against the
rules' fowner. Enable IMA to handle idmapped mounts by passing down the
mount's user namespace. We simply make use of the helpers we introduced
before. If the initial user namespace is passed nothing changes so
non-idmapped mounts will see identical behavior as before.
Link: https://lore.kernel.org/r/20210121131959.646623-27-christian.brauner@ubuntu.com
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
Diffstat (limited to 'security/selinux/Makefile')
0 files changed, 0 insertions, 0 deletions