tree f3b786a346f0c987d796784e1e08154338263ad3
parent ee13d785eac1fbe7e79ecca77bf7e902734a0b30
author Stephen Smalley <sds@tycho.nsa.gov> 1138791954 -0800
committer Linus Torvalds <torvalds@g5.osdl.org> 1138812798 -0800

[PATCH] selinux: fix and cleanup mprotect checks

Fix the SELinux mprotect checks on executable mappings so that they are not
re-applied when the mapping is already executable as well as cleaning up
the code.  This avoids a situation where e.g.  an application is prevented
from removing PROT_WRITE on an already executable mapping previously
authorized via execmem permission due to an execmod denial.

Signed-off-by: Stephen Smalley <sds@tycho.nsa.gov>
Acked-by: James Morris <jmorris@namei.org>
Signed-off-by: Andrew Morton <akpm@osdl.org>
Signed-off-by: Linus Torvalds <torvalds@osdl.org>