diff --git a/[refs] b/[refs] index 660d81dec208..bf0277810521 100644 --- a/[refs] +++ b/[refs] @@ -1,2 +1,2 @@ --- -refs/heads/master: 12204e24b1330428c3062faee10a0d80b8a5cb61 +refs/heads/master: 74192246910ff4fb95309ba1a683215644beeb62 diff --git a/trunk/security/selinux/hooks.c b/trunk/security/selinux/hooks.c index 7465d713b531..853b58c8b2cb 100644 --- a/trunk/security/selinux/hooks.c +++ b/trunk/security/selinux/hooks.c @@ -2484,6 +2484,10 @@ static int selinux_sb_kern_mount(struct super_block *sb, int flags, void *data) if (rc) return rc; + /* Allow all mounts performed by the kernel */ + if (flags & MS_KERNMOUNT) + return 0; + AVC_AUDIT_DATA_INIT(&ad, FS); ad.u.fs.path.dentry = sb->s_root; return superblock_has_perm(cred, sb, FILESYSTEM__MOUNT, &ad);