Stephen Smalley 875e01dd8a selinux: fix regression introduced by move_mount(2) syscall ... commit 98aa00345d upstream. commit 2db154b3ea ("vfs: syscall: Add move_mount(2) to move mounts around") introduced a new move_mount(2) system call and a corresponding new LSM security_move_mount hook but did not implement this hook for any existing LSM. This creates a regression for SELinux with respect to consistent checking of mounts; the existing selinux_mount hook checks mounton permission to the mount point path. Provide a SELinux hook implementation for move_mount that applies this same check for consistency. In the future we may wish to add a new move_mount filesystem permission and check as well, but this addresses the immediate regression. Fixes: 2db154b3ea ("vfs: syscall: Add move_mount(2) to move mounts around") Signed-off-by: Stephen Smalley <sds@tycho.nsa.gov> Reviewed-by: Ondrej Mosnacek <omosnace@redhat.com> Signed-off-by: Paul Moore <paul@paul-moore.com> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>		2020-02-14 16:34:19 -05:00
..
include	selinux: revert "stop passing MAY_NOT_BLOCK to the AVC upon follow_link"	2020-02-14 16:34:19 -05:00
ss	selinux/stable-5.4 PR 20191007	2019-10-08 10:51:37 -07:00
.gitignore
avc.c	selinux: revert "stop passing MAY_NOT_BLOCK to the AVC upon follow_link"	2020-02-14 16:34:19 -05:00
hooks.c	selinux: fix regression introduced by move_mount(2) syscall	2020-02-14 16:34:19 -05:00
ibpkey.c	treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 295	2019-06-05 17:36:38 +02:00
Kconfig	treewide: Add SPDX license identifier - Makefile/Kconfig	2019-05-21 10:50:46 +02:00
Makefile	SELinux: Remove unused selinux_is_enabled	2019-01-08 13:18:44 -08:00
netif.c	selinux/stable-5.4 PR 20190917	2019-09-23 11:21:04 -07:00
netlabel.c	treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 13	2019-05-21 11:28:45 +02:00
netlink.c	treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 500	2019-06-19 17:09:55 +02:00
netnode.c	selinux/stable-5.4 PR 20190917	2019-09-23 11:21:04 -07:00
netport.c	selinux/stable-5.4 PR 20190917	2019-09-23 11:21:04 -07:00
nlmsgtab.c	Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net	2019-06-22 08:59:24 -04:00
selinuxfs.c	Merge branch 'work.mount0' of git://git.kernel.org/pub/scm/linux/kernel/git/viro/vfs	2019-07-19 10:42:02 -07:00
xfrm.c	treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 500	2019-06-19 17:09:55 +02:00