SELinux: implement the new sb_remount LSM hook
authorEric Paris <eparis@redhat.com>
Thu, 3 Mar 2011 21:09:14 +0000 (16:09 -0500)
committerEric Paris <eparis@redhat.com>
Thu, 3 Mar 2011 21:12:28 +0000 (16:12 -0500)
commit026eb167ae77244458fa4b4b9fc171209c079ba7
tree1e66fcfeb0b43a6fb764e1d07f8f0200d0c99094
parentff36fe2c845cab2102e4826c1ffa0a6ebf487c65
SELinux: implement the new sb_remount LSM hook

For SELinux we do not allow security information to change during a remount
operation.  Thus this hook simply strips the security module options from
the data and verifies that those are the same options as exist on the
current superblock.

Signed-off-by: Eric Paris <eparis@redhat.com>
Reviewed-by: James Morris <jmorris@namei.org>
security/selinux/hooks.c