SELinux testsuite failure in overlayfs with v4.20-rc kernels

James Morris jmorris at namei.org
Wed Dec 12 22:18:58 UTC 2018


The SELinux testsuite is failing in the overlayfs tests in current -rc 
kernels. I bisected the issue to

commit 007ea44892e6fa963a0876a979e34890325c64eb
Author: Miklos Szeredi <mszeredi at redhat.com>
Date:   Fri Oct 26 23:34:39 2018 +0200

    ovl: relax permission checking on underlying layers
    
    Make permission checking more consistent:
    
     - special files don't need any access check on underling fs
    
     - exec permission check doesn't need to be performed on underlying fs
    
    Reported-by: "J. Bruce Fields" <bfields at fieldses.org>
    Signed-off-by: Miklos Szeredi <mszeredi at redhat.com>

Reverting this commit fixes the testsuite failure.

Is there any more information on the rationale for the change?


-- 
James Morris
<jmorris at namei.org>



More information about the Linux-security-module-archive mailing list