From: Stephen Smalley This patch defers setting the inode security state for newly created inodes until after policy has been loaded. Signed-off-by: Stephen Smalley Signed-off-by: Andrew Morton --- 25-akpm/security/selinux/hooks.c | 6 ++++++ 1 files changed, 6 insertions(+) diff -puN security/selinux/hooks.c~selinux-defer-inode-security-initialization security/selinux/hooks.c --- 25/security/selinux/hooks.c~selinux-defer-inode-security-initialization 2004-08-16 11:46:59.097301584 -0700 +++ 25-akpm/security/selinux/hooks.c 2004-08-16 11:46:59.103300672 -0700 @@ -1266,6 +1266,12 @@ static inline u32 file_to_av(struct file int inode_security_set_sid(struct inode *inode, u32 sid) { struct inode_security_struct *isec = inode->i_security; + struct superblock_security_struct *sbsec = inode->i_sb->s_security; + + if (!sbsec->initialized) { + /* Defer initialization to selinux_complete_init. */ + return 0; + } down(&isec->sem); isec->sclass = inode_mode_to_security_class(inode->i_mode); _