Andreas Gruenbacher 9287aed2ad selinux: Convert isec->lock into a spinlock ... Convert isec->lock from a mutex into a spinlock. Instead of holding the lock while sleeping in inode_doinit_with_dentry, set isec->initialized to LABEL_PENDING and release the lock. Then, when the sid has been determined, re-acquire the lock. If isec->initialized is still set to LABEL_PENDING, set isec->sid; otherwise, the sid has been set by another task (LABEL_INITIALIZED) or invalidated (LABEL_INVALID) in the meantime. This fixes a deadlock on gfs2 where * one task is in inode_doinit_with_dentry -> gfs2_getxattr, holds isec->lock, and tries to acquire the inode's glock, and * another task is in do_xmote -> inode_go_inval -> selinux_inode_invalidate_secctx, holds the inode's glock, and tries to acquire isec->lock. Signed-off-by: Andreas Gruenbacher <agruenba@redhat.com> [PM: minor tweaks to keep checkpatch.pl happy] Signed-off-by: Paul Moore <paul@paul-moore.com>		2016-11-22 17:44:02 -05:00
..
audit.h
avc.h
avc_ss.h
classmap.h	selinux: keep SELinux in sync with new capability definitions	2016-11-21 15:37:24 -05:00
conditional.h	selinux: Change bool variable name to index.	2016-04-14 11:24:50 -04:00
initial_sid_to_string.h
netif.h
netlabel.h	netlabel: Pass a family parameter to netlbl_skbuff_err().	2016-06-27 15:06:16 -04:00
netnode.h
netport.h
objsec.h	selinux: Convert isec->lock into a spinlock	2016-11-22 17:44:02 -05:00
security.h	selinux: drop SECURITY_SELINUX_POLICYDB_VERSION_MAX	2016-08-18 20:01:15 -04:00
xfrm.h