aboutsummaryrefslogtreecommitdiffstats
path: root/security/selinux/hooks.c
diff options
context:
space:
mode:
Diffstat (limited to 'security/selinux/hooks.c')
-rw-r--r--security/selinux/hooks.c11
1 files changed, 11 insertions, 0 deletions
diff --git a/security/selinux/hooks.c b/security/selinux/hooks.c
index cfb7ce339adc..b005acbcc6e9 100644
--- a/security/selinux/hooks.c
+++ b/security/selinux/hooks.c
@@ -171,6 +171,14 @@ static int selinux_netcache_avc_callback(u32 event)
171 return 0; 171 return 0;
172} 172}
173 173
174static int selinux_lsm_notifier_avc_callback(u32 event)
175{
176 if (event == AVC_CALLBACK_RESET)
177 call_lsm_notifier(LSM_POLICY_CHANGE, NULL);
178
179 return 0;
180}
181
174/* 182/*
175 * initialise the security for the init task 183 * initialise the security for the init task
176 */ 184 */
@@ -6387,6 +6395,9 @@ static __init int selinux_init(void)
6387 if (avc_add_callback(selinux_netcache_avc_callback, AVC_CALLBACK_RESET)) 6395 if (avc_add_callback(selinux_netcache_avc_callback, AVC_CALLBACK_RESET))
6388 panic("SELinux: Unable to register AVC netcache callback\n"); 6396 panic("SELinux: Unable to register AVC netcache callback\n");
6389 6397
6398 if (avc_add_callback(selinux_lsm_notifier_avc_callback, AVC_CALLBACK_RESET))
6399 panic("SELinux: Unable to register AVC LSM notifier callback\n");
6400
6390 if (selinux_enforcing) 6401 if (selinux_enforcing)
6391 printk(KERN_DEBUG "SELinux: Starting in enforcing mode\n"); 6402 printk(KERN_DEBUG "SELinux: Starting in enforcing mode\n");
6392 else 6403 else