Unverified Commit c78205e4 authored by openeuler-ci-bot's avatar openeuler-ci-bot Committed by Gitee
Browse files

!12758 selinux: add the processing of the failure of avc_add_xperms_decision() 

Merge Pull Request from: @ci-robot 
 
PR sync from: Gu Bowen <gubowen5@huawei.com>
https://mailweb.openeuler.org/hyperkitty/list/kernel@openeuler.org/message/IAVDUECLR26RYQBBTQRLNUJE6XJPUAL5/ 
 
https://gitee.com/openeuler/kernel/issues/IB0X4B 
 
Link:https://gitee.com/openeuler/kernel/pulls/12758

 

Reviewed-by: default avatarYang Yingliang <yangyingliang@huawei.com>
Signed-off-by: default avatarYang Yingliang <yangyingliang@huawei.com>
parents 42d61847 a6748458

security/selinux/avc.c

+5 −1
Original line number Diff line number Diff line
@@ -927,7 +927,11 @@ static int avc_update_node(struct selinux_avc *avc, 
		node->ae.avd.auditdeny &= ~perms;

		break;

	case AVC_CALLBACK_ADD_XPERMS:

		avc_add_xperms_decision(node, xpd);

		rc = avc_add_xperms_decision(node, xpd);

		if (rc) {

			avc_node_kill(avc, node);

			goto out_unlock;

		}

		break;

	}

	avc_node_replace(avc, node, orig);