diff options
Diffstat (limited to 'security/smack/smack_access.c')
| -rw-r--r-- | security/smack/smack_access.c | 9 |
1 files changed, 2 insertions, 7 deletions
diff --git a/security/smack/smack_access.c b/security/smack/smack_access.c index 9f3705e92712..db14689a21e0 100644 --- a/security/smack/smack_access.c +++ b/security/smack/smack_access.c | |||
| @@ -220,14 +220,9 @@ int smk_curacc(char *obj_label, u32 mode, struct smk_audit_info *a) | |||
| 220 | } | 220 | } |
| 221 | 221 | ||
| 222 | /* | 222 | /* |
| 223 | * Return if a specific label has been designated as the | 223 | * Allow for priviliged to override policy. |
| 224 | * only one that gets privilege and current does not | ||
| 225 | * have that label. | ||
| 226 | */ | 224 | */ |
| 227 | if (smack_onlycap != NULL && smack_onlycap != sp) | 225 | if (rc != 0 && smack_privileged(CAP_MAC_OVERRIDE)) |
| 228 | goto out_audit; | ||
| 229 | |||
| 230 | if (capable(CAP_MAC_OVERRIDE)) | ||
| 231 | rc = 0; | 226 | rc = 0; |
| 232 | 227 | ||
| 233 | out_audit: | 228 | out_audit: |
