J. Bruce Fields c7dad095f3 security/selinux: fix SECURITY_LSM_NATIVE_LABELS on reused superblock ... commit 3815a245b5 upstream. In the case when we're reusing a superblock, selinux_sb_clone_mnt_opts() fails to set set_kern_flags, with the result that nfs_clone_sb_security() incorrectly clears NFS_CAP_SECURITY_LABEL. The result is that if you mount the same NFS filesystem twice, NFS security labels are turned off, even if they would work fine if you mounted the filesystem only once. ("fixes" may be not exactly the right tag, it may be more like "fixed-other-cases-but-missed-this-one".) Cc: Scott Mayhew <smayhew@redhat.com> Cc: stable@vger.kernel.org Fixes: 0b4d3452b8 "security/selinux: allow security_sb_clone_mnt_opts..." Signed-off-by: J. Bruce Fields <bfields@redhat.com> Acked-by: Stephen Smalley <sds@tycho.nsa.gov> Signed-off-by: Paul Moore <paul@paul-moore.com> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>		2019-03-23 20:10:06 +01:00
..
apparmor	apparmor: Fix aa_label_build() error handling for failed merges	2019-03-13 14:02:32 -07:00
integrity	ima: open a new file instance if no read permissions	2018-11-13 11:08:46 -08:00
keys	keys: Fix dependency loop between construction record and auth key	2019-03-23 20:09:48 +01:00
loadpin	module: replace the existing LSM hook in init_module	2018-07-16 12:31:57 -07:00
selinux	security/selinux: fix SECURITY_LSM_NATIVE_LABELS on reused superblock	2019-03-23 20:10:06 +01:00
smack	smack: fix access permissions for keyring	2019-02-12 19:47:05 +01:00
tomoyo	Kbuild updates for v4.19	2018-08-15 12:09:03 -07:00
yama	Yama: Check for pid death before checking ancestry	2019-01-22 21:40:32 +01:00
commoncap.c	cap_inode_getsecurity: use d_find_any_alias() instead of d_find_alias()	2018-08-11 02:05:53 -05:00
device_cgroup.c	docs: fix broken references with multiple hints	2018-06-15 18:10:01 -03:00
inode.c
Kconfig	Revert "x86/mm/legacy: Populate the user page-table with user pgd's"	2018-09-14 17:08:45 +02:00
lsm_audit.c	missing barriers in some of unix_sock ->addr and ->path accesses	2019-03-19 13:12:41 +01:00
Makefile
min_addr.c
security.c	LSM: Check for NULL cred-security on free	2019-01-22 21:40:35 +01:00