tree 3fe85bb21b799df769d9079687c874ba1569a4fa
parent 6f3be9f562e3027c77bc4482ccf2cea8600a7f74
author Andreas Gruenbacher <agruenba@redhat.com> 1450973380 -0500
committer Paul Moore <pmoore@redhat.com> 1450973380 -0500

selinux: Revalidate invalid inode security labels

When fetching an inode's security label, check if it is still valid, and
try reloading it if it is not. Reloading will fail when we are in RCU
context which doesn't allow sleeping, or when we can't find a dentry for
the inode.  (Reloading happens via iop->getxattr which takes a dentry
parameter.)  When reloading fails, continue using the old, invalid
label.

Signed-off-by: Andreas Gruenbacher <agruenba@redhat.com>
Acked-by: Stephen Smalley <sds@tycho.nsa.gov>
Signed-off-by: Paul Moore <pmoore@redhat.com>