This is needed for computing pathnames in the AppArmor LSM.
Signed-off-by: Tony Jones <tonyj@suse.de>

Signed-off-by: Andreas Gruenbacher <agruen@suse.de>

Signed-off-by: John Johansen <jjohansen@suse.de>
---

 fs/namei.c               |    2 +-

 include/linux/security.h |    9 ++++++---

 security/dummy.c         |    2 +-

 security/security.c      |    5 +++--

 security/selinux/hooks.c |    3 ++-

 5 files changed, 13 insertions(+), 8 deletions(-)
--- a/fs/namei.c

+++ b/fs/namei.c

@@ -1584,7 +1584,7 @@ int vfs_create(struct inode *dir, struct

 		return -EACCES;	/* shouldn't it be ENOSYS? */

 	mode &= S_IALLUGO;

 	mode |= S_IFREG;

-	error = security_inode_create(dir, dentry, mode);

+	error = security_inode_create(dir, dentry, nd ? nd->mnt : NULL, mode);

 	if (error)

 		return error;

 	DQUOT_INIT(dir);

--- a/include/linux/security.h

+++ b/include/linux/security.h

@@ -297,6 +297,7 @@ struct request_sock;

  *	Check permission to create a regular file.

  *	@dir contains inode structure of the parent of the new file.

  *	@dentry contains the dentry structure for the file to be created.

+ *	@mnt is the vfsmount corresponding to @dentry (may be NULL).

  *	@mode contains the file mode of the file to be created.

  *	Return 0 if permission is granted.

  * @inode_link:

@@ -1234,8 +1235,8 @@ struct security_operations {

 	void (*inode_free_security) (struct inode *inode);

 	int (*inode_init_security) (struct inode *inode, struct inode *dir,

 				    char **name, void **value, size_t *len);

-	int (*inode_create) (struct inode *dir,

-	                     struct dentry *dentry, int mode);

+	int (*inode_create) (struct inode *dir, struct dentry *dentry,

+			     struct vfsmount *mnt, int mode);

 	int (*inode_link) (struct dentry *old_dentry,

 	                   struct inode *dir, struct dentry *new_dentry);

 	int (*inode_unlink) (struct inode *dir, struct dentry *dentry);

@@ -1490,7 +1491,8 @@ int security_inode_alloc(struct inode *i

 void security_inode_fr...
[ message continues ]