1 files changed, 8 insertions, 1 deletions

diff --git a/security/selinux/hooks.c b/security/selinux/hooks.c
index f8931c5d252a..81e012c66d95 100644
--- a/security/selinux/hooks.c
+++ b/security/selinux/hooks.c
@@ -3264,12 +3264,16 @@ static int selinux_inode_setsecurity(struct inode *inode, const char *name,
                                      const void *value, size_t size, int flags)
 {
         struct inode_security_struct *isec = inode_security_novalidate(inode);
+        struct superblock_security_struct *sbsec = inode->i_sb->s_security;
         u32 newsid;
         int rc;
 
         if (strcmp(name, XATTR_SELINUX_SUFFIX))
                 return -EOPNOTSUPP;
 
+        if (!(sbsec->flags & SBLABEL_MNT))
+                return -EOPNOTSUPP;
+
         if (!value || !size)
                 return -EACCES;
 
@@ -6415,7 +6419,10 @@ static void selinux_inode_invalidate_secctx(struct inode *inode)
  */
 static int selinux_inode_notifysecctx(struct inode *inode, void *ctx, u32 ctxlen)
 {
-        return selinux_inode_setsecurity(inode, XATTR_SELINUX_SUFFIX, ctx, ctxlen, 0);
+        int rc = selinux_inode_setsecurity(inode, XATTR_SELINUX_SUFFIX,
+                                           ctx, ctxlen, 0);
+        /* Do not return error when suppressing label (SBLABEL_MNT not set). */
+        return rc == -EOPNOTSUPP ? 0 : rc;
 }
 
 /*