diff options
| author | Casey Schaufler <casey@schaufler-ca.com> | 2012-05-23 20:46:58 -0400 |
|---|---|---|
| committer | Casey Schaufler <casey@schaufler-ca.com> | 2012-07-13 18:49:23 -0400 |
| commit | eb982cb4cf6405b97ea1f9e1d10864981f269d46 (patch) | |
| tree | 8d89448e0ef96d587ea8052021a721e632b4b318 | |
| parent | 417c6c8ee2eb6975f357d8975af94ba5fbeaf82d (diff) | |
Smack: fix smack_new_inode bogosities
In January of 2012 Al Viro pointed out three bits of code that
he titled "new_inode_smack bogosities". This patch repairs these
errors.
1. smack_sb_kern_mount() included a NULL check that is impossible.
The check and NULL case are removed.
2. smack_kb_kern_mount() included pointless locking. The locking is
removed. Since this is the only place that lock was used the lock
is removed from the superblock_smack structure.
3. smk_fill_super() incorrectly and unnecessarily set the Smack label
for the smackfs root inode. The assignment has been removed.
Targeted for git://gitorious.org/smack-next/kernel.git
Signed-off-by: Casey Schaufler <casey@schaufler-ca.com>
| -rw-r--r-- | security/smack/smack.h | 1 | ||||
| -rw-r--r-- | security/smack/smack_lsm.c | 8 | ||||
| -rw-r--r-- | security/smack/smackfs.c | 1 |
3 files changed, 2 insertions, 8 deletions
diff --git a/security/smack/smack.h b/security/smack/smack.h index cc361b8f3d13..76feb31eb823 100644 --- a/security/smack/smack.h +++ b/security/smack/smack.h | |||
| @@ -43,7 +43,6 @@ struct superblock_smack { | |||
| 43 | char *smk_hat; | 43 | char *smk_hat; |
| 44 | char *smk_default; | 44 | char *smk_default; |
| 45 | int smk_initialized; | 45 | int smk_initialized; |
| 46 | spinlock_t smk_sblock; /* for initialization */ | ||
| 47 | }; | 46 | }; |
| 48 | 47 | ||
| 49 | struct socket_smack { | 48 | struct socket_smack { |
diff --git a/security/smack/smack_lsm.c b/security/smack/smack_lsm.c index ee0bb5735f35..29bb4e7fa5e8 100644 --- a/security/smack/smack_lsm.c +++ b/security/smack/smack_lsm.c | |||
| @@ -251,7 +251,6 @@ static int smack_sb_alloc_security(struct super_block *sb) | |||
| 251 | sbsp->smk_floor = smack_known_floor.smk_known; | 251 | sbsp->smk_floor = smack_known_floor.smk_known; |
| 252 | sbsp->smk_hat = smack_known_hat.smk_known; | 252 | sbsp->smk_hat = smack_known_hat.smk_known; |
| 253 | sbsp->smk_initialized = 0; | 253 | sbsp->smk_initialized = 0; |
| 254 | spin_lock_init(&sbsp->smk_sblock); | ||
| 255 | 254 | ||
| 256 | sb->s_security = sbsp; | 255 | sb->s_security = sbsp; |
| 257 | 256 | ||
| @@ -332,13 +331,10 @@ static int smack_sb_kern_mount(struct super_block *sb, int flags, void *data) | |||
| 332 | char *commap; | 331 | char *commap; |
| 333 | char *nsp; | 332 | char *nsp; |
| 334 | 333 | ||
| 335 | spin_lock(&sp->smk_sblock); | 334 | if (sp->smk_initialized != 0) |
| 336 | if (sp->smk_initialized != 0) { | ||
| 337 | spin_unlock(&sp->smk_sblock); | ||
| 338 | return 0; | 335 | return 0; |
| 339 | } | 336 | |
| 340 | sp->smk_initialized = 1; | 337 | sp->smk_initialized = 1; |
| 341 | spin_unlock(&sp->smk_sblock); | ||
| 342 | 338 | ||
| 343 | for (op = data; op != NULL; op = commap) { | 339 | for (op = data; op != NULL; op = commap) { |
| 344 | commap = strchr(op, ','); | 340 | commap = strchr(op, ','); |
diff --git a/security/smack/smackfs.c b/security/smack/smackfs.c index 1810c9a4ed48..3686db7e2c6b 100644 --- a/security/smack/smackfs.c +++ b/security/smack/smackfs.c | |||
| @@ -2051,7 +2051,6 @@ static int smk_fill_super(struct super_block *sb, void *data, int silent) | |||
| 2051 | } | 2051 | } |
| 2052 | 2052 | ||
| 2053 | root_inode = sb->s_root->d_inode; | 2053 | root_inode = sb->s_root->d_inode; |
| 2054 | root_inode->i_security = new_inode_smack(smack_known_floor.smk_known); | ||
| 2055 | 2054 | ||
| 2056 | return 0; | 2055 | return 0; |
| 2057 | } | 2056 | } |
