]> git.ipfire.org Git - people/teissler/ipfire-2.x.git/blame - src/patches/suse-2.6.27.25/patches.suse/SoN-15-mm-selinux-emergency.patch
Revert "Move xen patchset to new version's subdir."
[people/teissler/ipfire-2.x.git] / src / patches / suse-2.6.27.25 / patches.suse / SoN-15-mm-selinux-emergency.patch
CommitLineData
00e5a55c
BS
1From: Peter Zijlstra <a.p.zijlstra@chello.nl>
2Subject: selinux: tag avc cache alloc as non-critical
3Patch-mainline: No
4References: FATE#303834
5
6Failing to allocate a cache entry will only harm performance not correctness.
7Do not consume valuable reserve pages for something like that.
8
9Signed-off-by: Peter Zijlstra <a.p.zijlstra@chello.nl>
10Acked-by: James Morris <jmorris@namei.org>
11Acked-by: Neil Brown <neilb@suse.de>
12Acked-by: Suresh Jayaraman <sjayaraman@suse.de>
13
14---
15 security/selinux/avc.c | 2 +-
16 1 file changed, 1 insertion(+), 1 deletion(-)
17
18Index: linux-2.6.26/security/selinux/avc.c
19===================================================================
20--- linux-2.6.26.orig/security/selinux/avc.c
21+++ linux-2.6.26/security/selinux/avc.c
22@@ -337,7 +337,7 @@ static struct avc_node *avc_alloc_node(v
23 {
24 struct avc_node *node;
25
26- node = kmem_cache_zalloc(avc_node_cachep, GFP_ATOMIC);
27+ node = kmem_cache_zalloc(avc_node_cachep, GFP_ATOMIC|__GFP_NOMEMALLOC);
28 if (!node)
29 goto out;
30