diff options
Diffstat (limited to 'security/selinux/ss/mls.c')
| -rw-r--r-- | security/selinux/ss/mls.c | 8 |
1 files changed, 4 insertions, 4 deletions
diff --git a/security/selinux/ss/mls.c b/security/selinux/ss/mls.c index a6ca0587e634..77d745da48bb 100644 --- a/security/selinux/ss/mls.c +++ b/security/selinux/ss/mls.c | |||
| @@ -437,13 +437,13 @@ int mls_setup_user_range(struct context *fromcon, struct user_datum *user, | |||
| 437 | struct mls_level *usercon_clr = &(usercon->range.level[1]); | 437 | struct mls_level *usercon_clr = &(usercon->range.level[1]); |
| 438 | 438 | ||
| 439 | /* Honor the user's default level if we can */ | 439 | /* Honor the user's default level if we can */ |
| 440 | if (mls_level_between(user_def, fromcon_sen, fromcon_clr)) { | 440 | if (mls_level_between(user_def, fromcon_sen, fromcon_clr)) |
| 441 | *usercon_sen = *user_def; | 441 | *usercon_sen = *user_def; |
| 442 | } else if (mls_level_between(fromcon_sen, user_def, user_clr)) { | 442 | else if (mls_level_between(fromcon_sen, user_def, user_clr)) |
| 443 | *usercon_sen = *fromcon_sen; | 443 | *usercon_sen = *fromcon_sen; |
| 444 | } else if (mls_level_between(fromcon_clr, user_low, user_def)) { | 444 | else if (mls_level_between(fromcon_clr, user_low, user_def)) |
| 445 | *usercon_sen = *user_low; | 445 | *usercon_sen = *user_low; |
| 446 | } else | 446 | else |
| 447 | return -EINVAL; | 447 | return -EINVAL; |
| 448 | 448 | ||
| 449 | /* Lower the clearance of available contexts | 449 | /* Lower the clearance of available contexts |