diff options
Diffstat (limited to 'security/smack/smack_access.c')
-rw-r--r-- | security/smack/smack_access.c | 9 |
1 files changed, 2 insertions, 7 deletions
diff --git a/security/smack/smack_access.c b/security/smack/smack_access.c index 9f3705e92712..db14689a21e0 100644 --- a/security/smack/smack_access.c +++ b/security/smack/smack_access.c | |||
@@ -220,14 +220,9 @@ int smk_curacc(char *obj_label, u32 mode, struct smk_audit_info *a) | |||
220 | } | 220 | } |
221 | 221 | ||
222 | /* | 222 | /* |
223 | * Return if a specific label has been designated as the | 223 | * Allow for priviliged to override policy. |
224 | * only one that gets privilege and current does not | ||
225 | * have that label. | ||
226 | */ | 224 | */ |
227 | if (smack_onlycap != NULL && smack_onlycap != sp) | 225 | if (rc != 0 && smack_privileged(CAP_MAC_OVERRIDE)) |
228 | goto out_audit; | ||
229 | |||
230 | if (capable(CAP_MAC_OVERRIDE)) | ||
231 | rc = 0; | 226 | rc = 0; |
232 | 227 | ||
233 | out_audit: | 228 | out_audit: |