Paul Moore <paul@xxxxxxxxxxxxxx> writes:
> On Thu, Oct 8, 2020 at 9:37 PM <rentianyue@xxxxxxxxxxxxx> wrote:
>> From: Tianyue Ren <rentianyue@xxxxxxxxxx>
>>
>> Mark the inode security label as invalid if we cannot find
>> a dentry so that we will retry later rather than marking it
>> initialized with the unlabeled SID.
>>
>> Fixes: 9287aed2ad1f ("selinux: Convert isec->lock into a spinlock")
>> Signed-off-by: Tianyue Ren <rentianyue@xxxxxxxxxx>
>> ---
>> security/selinux/hooks.c | 19 ++++++++++++++++---
>> 1 file changed, 16 insertions(+), 3 deletions(-)
>
> Merged into selinux/next with some minor tweaks to the comments.
> Thanks for your help!
This seems to break booting on s390:
Welcome to Fedora 32 (Thirty Two)!
[ 1.434571] systemd[1]: Set hostname to <xxx.xxx>
[ 1.436839] audit: type=1400 audit(1604408868.681:4): avc: denied { write } for pid=1 comm="systemd" dev="cgroup2" ino=2 scontext=system_u:sys
tem_r:init_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=0
[ 1.436840] systemd[1]: Failed to create /init.scope control group: Permission denied
[ 1.438039] systemd[1]: Failed to allocate manager object: Permission denied
[ [0;1;31m!!!!!! [0m] Failed to allocate manager object.
[ 1.438281] systemd[1]: Freezing execution.
Any ideas? If i revert 83370b31a915493231e5b9addc72e4bef69f8d31 from
linux-next-20201103 it works fine...
Thanks
Sven
