diff options
author | Ondrej Mosnacek <omosnace@redhat.com> | 2021-03-18 22:53:01 +0100 |
---|---|---|
committer | Paul Moore <paul@paul-moore.com> | 2021-03-18 23:13:04 -0400 |
commit | 519dad3bcd809dc1523bf80ab0310ddb3bf00ade (patch) | |
tree | b01c0dacf941d602dbdce10a105e4bba14ee3949 /security/selinux/include/security.h | |
parent | 365982aba1f264dba26f0908700d62bfa046918c (diff) | |
download | linux-519dad3bcd809dc1523bf80ab0310ddb3bf00ade.tar.gz linux-519dad3bcd809dc1523bf80ab0310ddb3bf00ade.tar.bz2 linux-519dad3bcd809dc1523bf80ab0310ddb3bf00ade.zip |
selinux: don't log MAC_POLICY_LOAD record on failed policy load
If sel_make_policy_nodes() fails, we should jump to 'out', not 'out1',
as the latter would incorrectly log an MAC_POLICY_LOAD audit record,
even though the policy hasn't actually been reloaded. The 'out1' jump
label now becomes unused and can be removed.
Fixes: 02a52c5c8c3b ("selinux: move policy commit after updating selinuxfs")
Cc: stable@vger.kernel.org
Signed-off-by: Ondrej Mosnacek <omosnace@redhat.com>
Signed-off-by: Paul Moore <paul@paul-moore.com>
Diffstat (limited to 'security/selinux/include/security.h')
0 files changed, 0 insertions, 0 deletions