From: Tetsuo Handa Date: Sat, 28 Aug 2010 05:58:44 +0000 (+0900) Subject: LSM: Fix security_module_enable() error. X-Git-Tag: v2.6.37-rc1~218^2~23 X-Git-Url: http://review.tizen.org/git/?a=commitdiff_plain;h=065d78a0603cc6f8d288e96dbf761b96984b634f;p=platform%2Fupstream%2Fkernel-adaptation-pc.git LSM: Fix security_module_enable() error. We can set default LSM module to DAC (which means "enable no LSM module"). If default LSM module was set to DAC, security_module_enable() must return 0 unless overridden via boot time parameter. Signed-off-by: Tetsuo Handa Acked-by: Serge E. Hallyn Signed-off-by: James Morris --- diff --git a/security/security.c b/security/security.c index c53949f..43b6463 100644 --- a/security/security.c +++ b/security/security.c @@ -89,20 +89,12 @@ __setup("security=", choose_lsm); * Return true if: * -The passed LSM is the one chosen by user at boot time, * -or the passed LSM is configured as the default and the user did not - * choose an alternate LSM at boot time, - * -or there is no default LSM set and the user didn't specify a - * specific LSM and we're the first to ask for registration permission, - * -or the passed LSM is currently loaded. + * choose an alternate LSM at boot time. * Otherwise, return false. */ int __init security_module_enable(struct security_operations *ops) { - if (!*chosen_lsm) - strncpy(chosen_lsm, ops->name, SECURITY_NAME_MAX); - else if (strncmp(ops->name, chosen_lsm, SECURITY_NAME_MAX)) - return 0; - - return 1; + return !strcmp(ops->name, chosen_lsm); } /**