commit 8b8efb44033c7e86b3dc76f825c693ec92ae30e9
author Tetsuo Handa <penguin-kernel@I-love.SAKURA.ne.jp> Sun Oct 04 21:49:48 2009 +0900
committer James Morris <jmorris@namei.org> Mon Oct 12 10:56:02 2009 +1100
tree 8cf43afc59f88f36a86f3a8165770bccec28b3c3
parent 89eda06837094ce9f34fae269b8773fcfd70f046

LSM: Add security_path_chroot().

This patch allows pathname based LSM modules to check chroot() operations.

This hook is used by TOMOYO.

Signed-off-by: Tetsuo Handa <penguin-kernel@I-love.SAKURA.ne.jp>
Signed-off-by: James Morris <jmorris@namei.org>

fs/open.c

diff --git a/fs/open.c b/fs/open.c
index b5c294d..201041d 100644
--- a/fs/open.c
+++ b/fs/open.c
@@ -587,6 +587,9 @@
 	error = -EPERM;
 	if (!capable(CAP_SYS_CHROOT))
 		goto dput_and_out;
+	error = security_path_chroot(&path);
+	if (error)
+		goto dput_and_out;
 
 	set_fs_root(current->fs, &path);
 	error = 0;