tree 217543affc5c1c76181ffca00c23cfa69f1dd4f6
parent 9cfcac810e8993fa7a5bfd24b1a21f1dbbb03a7b
author Eric Paris <eparis@redhat.com> 1279899837 -0400
committer James Morris <jmorris@namei.org> 1280727307 +1000

security: make LSMs explicitly mask off permissions

SELinux needs to pass the MAY_ACCESS flag so it can handle auditting
correctly.  Presently the masking of MAY_* flags is done in the VFS.  In
order to allow LSMs to decide what flags they care about and what flags
they don't just pass them all and the each LSM mask off what they don't
need.  This patch should contain no functional changes to either the VFS or
any LSM.

Signed-off-by: Eric Paris <eparis@redhat.com>
Acked-by:  Stephen D. Smalley <sds@tycho.nsa.gov>
Signed-off-by: James Morris <jmorris@namei.org>