commit 1ac42476263eec99fb2d3c31ee946cb44e80ddd5
author Paul Moore <paul@paul-moore.com> Mon Apr 18 16:41:38 2016 -0400
committer Paul Moore <paul@paul-moore.com> Tue Apr 19 16:37:27 2016 -0400
tree d69cdac4dc64a6333de68d51b9697f273fb8c45c
parent 20cdef8d57591ec8674f65ccfe555aca5fd10b64

selinux: check ss_initialized before revalidating an inode label

There is no point in trying to revalidate an inode's security label if
the security server is not yet initialized.

Signed-off-by: Paul Moore <paul@paul-moore.com>

security/selinux/hooks.c

diff --git a/security/selinux/hooks.c b/security/selinux/hooks.c
index b09aad7..474011c 100644
--- a/security/selinux/hooks.c
+++ b/security/selinux/hooks.c
@@ -259,7 +259,7 @@
 
 	might_sleep_if(may_sleep);
 
-	if (isec->initialized != LABEL_INITIALIZED) {
+	if (ss_initialized && isec->initialized != LABEL_INITIALIZED) {
 		if (!may_sleep)
 			return -ECHILD;