selinux: remove secondary ops call to inode_follow_link
Remove secondary ops call to inode_follow_link, which is a noop in capabilities. Acked-by: Serge Hallyn <serue@us.ibm.com> Signed-off-by: James Morris <jmorris@namei.org>
This commit is contained in:
@@ -2674,11 +2674,7 @@ static int selinux_inode_readlink(struct dentry *dentry)
|
|||||||
static int selinux_inode_follow_link(struct dentry *dentry, struct nameidata *nameidata)
|
static int selinux_inode_follow_link(struct dentry *dentry, struct nameidata *nameidata)
|
||||||
{
|
{
|
||||||
const struct cred *cred = current_cred();
|
const struct cred *cred = current_cred();
|
||||||
int rc;
|
|
||||||
|
|
||||||
rc = secondary_ops->inode_follow_link(dentry, nameidata);
|
|
||||||
if (rc)
|
|
||||||
return rc;
|
|
||||||
return dentry_has_perm(cred, NULL, dentry, FILE__READ);
|
return dentry_has_perm(cred, NULL, dentry, FILE__READ);
|
||||||
}
|
}
|
||||||
|
|
||||||
|
Reference in New Issue
Block a user