From d99520c3eb23dcbf0cc39302ee499f140d45e057 Mon Sep 17 00:00:00 2001 From: James Morris Date: Mon, 18 Oct 2004 18:17:18 -0700 Subject: [PATCH] [PATCH] SELinux: allow all filesystems to specify fscreate mount option The patch below allows all types of filesystems to specify the fscreate mount option (which is used to specify the security context of the filesystem itself). This was previously only available for filesystems with full xattr security labeling, but is also potentially required for filesystems with e.g. psuedo xattr labeling such as devpts and tmpfs. An example of use is to specify at mount time the fs security context of a tmpfs filesystem, overriding the default specified in policy for that filesystem. This patch has been in the Fedora kernel for some weeks with no problems. Signed-off-by: James Morris Signed-off-by: Stephen Smalley Signed-off-by: Andrew Morton Signed-off-by: Linus Torvalds --- security/selinux/hooks.c | 7 ------- 1 file changed, 7 deletions(-) diff --git a/security/selinux/hooks.c b/security/selinux/hooks.c index bd93177488232..40b6911892d4c 100644 --- a/security/selinux/hooks.c +++ b/security/selinux/hooks.c @@ -387,13 +387,6 @@ static int try_context_mount(struct super_block *sb, void *data) break; case Opt_fscontext: - if (sbsec->behavior != SECURITY_FS_USE_XATTR) { - rc = -EINVAL; - printk(KERN_WARNING "SELinux: " - "fscontext option is invalid for" - " this filesystem type\n"); - goto out_free; - } if (seen & (Opt_context|Opt_fscontext)) { rc = -EINVAL; printk(KERN_WARNING SEL_MOUNT_FAIL_MSG); -- 2.53.0