tree 8fbe98b01a13946c02a56ab7bab2c4ed077aee3f
parent e517a0cd859ae0c4d9451107113fc2b076456f8f
author Stephen Smalley <sds@tycho.nsa.gov> 1131514473 -0800
committer Linus Torvalds <torvalds@g5.osdl.org> 1131551751 -0800

[PATCH] selinux: disable setxattr on mountpoint labeled filesystems

This patch disables the setting of SELinux xattrs on files created in
filesystems labeled via mountpoint labeling (mounted with the context=
option).  selinux_inode_setxattr already prevents explicit setxattr from
userspace on such filesystems, so this provides consistent behavior for
file creation.

Signed-off-by: Stephen Smalley <sds@tycho.nsa.gov>
Signed-off-by: James Morris <jmorris@namei.org>
Signed-off-by: Andrew Morton <akpm@osdl.org>
Signed-off-by: Linus Torvalds <torvalds@osdl.org>