diff options
| author | James Morris <[email protected]> | 2009-01-29 01:19:51 +0000 |
|---|---|---|
| committer | James Morris <[email protected]> | 2009-01-29 21:55:11 +0000 |
| commit | d541bbee6902d5ffb8a03d63ac8f4b1364c2ff93 (patch) | |
| tree | f6b3f9547807d9eb8995885f259e4d5140d70405 /security/selinux/hooks.c | |
| parent | selinux: remove secondary ops call to inode_setattr (diff) | |
| download | kernel-d541bbee6902d5ffb8a03d63ac8f4b1364c2ff93.tar.gz kernel-d541bbee6902d5ffb8a03d63ac8f4b1364c2ff93.zip | |
selinux: remove secondary ops call to file_mprotect
Remove secondary ops call to file_mprotect, which is
a noop in capabilities.
Acked-by: Serge Hallyn <[email protected]>
Acked-by: Eric Paris <[email protected]>
Signed-off-by: James Morris <[email protected]>
Diffstat (limited to 'security/selinux/hooks.c')
| -rw-r--r-- | security/selinux/hooks.c | 7 |
1 files changed, 1 insertions, 6 deletions
diff --git a/security/selinux/hooks.c b/security/selinux/hooks.c index 08b506846a1f..2c98071fba8b 100644 --- a/security/selinux/hooks.c +++ b/security/selinux/hooks.c @@ -3056,18 +3056,13 @@ static int selinux_file_mprotect(struct vm_area_struct *vma, unsigned long prot) { const struct cred *cred = current_cred(); - int rc; - - rc = secondary_ops->file_mprotect(vma, reqprot, prot); - if (rc) - return rc; if (selinux_checkreqprot) prot = reqprot; #ifndef CONFIG_PPC32 if ((prot & PROT_EXEC) && !(vma->vm_flags & VM_EXEC)) { - rc = 0; + int rc = 0; if (vma->vm_start >= vma->vm_mm->start_brk && vma->vm_end <= vma->vm_mm->brk) { rc = cred_has_perm(cred, cred, PROCESS__EXECHEAP); |