tree 7595dd217545593675d40f85cfb11d69697a8300
parent 8d082f8f3fb89e8a1fcb5120ad98cd9860c8a3e8
author Andi Kleen <ak@linux.intel.com> 1303431799 -0700
committer Linus Torvalds <torvalds@linux-foundation.org> 1303514249 -0700

SECURITY: Move exec_permission RCU checks into security modules

Right now all RCU walks fall back to reference walk when CONFIG_SECURITY
is enabled, even though just the standard capability module is active.
This is because security_inode_exec_permission unconditionally fails
RCU walks.

Move this decision to the low level security module. This requires
passing the RCU flags down the security hook. This way at least
the capability module and a few easy cases in selinux/smack work
with RCU walks with CONFIG_SECURITY=y

Signed-off-by: Andi Kleen <ak@linux.intel.com>
Acked-by: Eric Paris <eparis@redhat.com>
Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>