1 files changed, 7 insertions, 3 deletions

diff --git a/security/selinux/ss/mls.c b/security/selinux/ss/mls.c
index 2fe459df3c85..b7efa2296969 100644
--- a/security/selinux/ss/mls.c
+++ b/security/selinux/ss/mls.c
@@ -245,9 +245,13 @@ int mls_context_to_sid(struct policydb *pol,
         char *rangep[2];
 
         if (!pol->mls_enabled) {
-                if ((def_sid != SECSID_NULL && oldc) || (*scontext) == '\0')
-                        return 0;
-                return -EINVAL;
+                /*
+                 * With no MLS, only return -EINVAL if there is a MLS field
+                 * and it did not come from an xattr.
+                 */
+                if (oldc && def_sid == SECSID_NULL)
+                        return -EINVAL;
+                return 0;
         }
 
         /*