[PATCH] fix for 2.4.10 initialization

Previous message: Sandy Harris: "Re: GPL only usage of security.h"
Next in thread: Greg KH: "Re: [PATCH] fix for 2.4.10 initialization"
Reply: Greg KH: "Re: [PATCH] fix for 2.4.10 initialization"
Reply: Chris Wright: "Re: [PATCH] fix for 2.4.10 initialization"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

jmorrisat_private

It seems that LSM now needs to be initialized earlier during the boot
process, as the 2.4.10 kernel attempts to mount a pseudo filesystem for
block devices during vfs_caches_init().  This generates a call to
capable(CAP_SYS_ADMIN) before the dummy module is loaded, causing an oops.


Please see the patch below for a possible fix.


- James
-- 
James Morris
<jmorrisat_private>


diff --exclude ChangeSet --exclude BitKeeper --exclude SCCS -urN lsm/init/main.c lsm-w1/init/main.c

--- lsm/init/main.c	Mon Sep 24 18:29:01 2001
+++ lsm-w1/init/main.c	Mon Sep 24 23:14:41 2001
@@ -577,6 +577,7 @@

 	fork_init(mempages);
 	proc_caches_init();
+	security_scaffolding_startup();
 	vfs_caches_init(mempages);
 	buffer_init(mempages);
 	page_cache_init(mempages);
@@ -584,7 +585,6 @@
 	ccwcache_init();
 #endif
 	signals_init();
-	security_scaffolding_startup();
 #ifdef CONFIG_PROC_FS
 	proc_root_init();
 #endif


_______________________________________________
linux-security-module mailing list
linux-security-moduleat_private
http://mail.wirex.com/mailman/listinfo/linux-security-module
