diff options
author | Al Viro <viro@zeniv.linux.org.uk> | 2018-06-08 13:40:10 -0400 |
---|---|---|
committer | Al Viro <viro@zeniv.linux.org.uk> | 2018-07-12 10:04:19 -0400 |
commit | 6035a27b25ab9dadc8c3d5c5df5eae3fca62fc95 (patch) | |
tree | 46b9eb3f1e96efa127e756484a72e508575874b8 /fs/nfsd/vfs.c | |
parent | 73a09dd94377e4b186b300bd5461920710c7c3d5 (diff) | |
download | op-kernel-dev-6035a27b25ab9dadc8c3d5c5df5eae3fca62fc95.zip op-kernel-dev-6035a27b25ab9dadc8c3d5c5df5eae3fca62fc95.tar.gz |
IMA: don't propagate opened through the entire thing
just check ->f_mode in ima_appraise_measurement()
Acked-by: Linus Torvalds <torvalds@linux-foundation.org>
Signed-off-by: Al Viro <viro@zeniv.linux.org.uk>
Diffstat (limited to 'fs/nfsd/vfs.c')
-rw-r--r-- | fs/nfsd/vfs.c | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/fs/nfsd/vfs.c b/fs/nfsd/vfs.c index b0555d7..55a099e 100644 --- a/fs/nfsd/vfs.c +++ b/fs/nfsd/vfs.c @@ -763,7 +763,7 @@ nfsd_open(struct svc_rqst *rqstp, struct svc_fh *fhp, umode_t type, goto out_nfserr; } - host_err = ima_file_check(file, may_flags, 0); + host_err = ima_file_check(file, may_flags); if (host_err) { fput(file); goto out_nfserr; |