diff --git a/mm/secretmem.c b/mm/secretmem.c index 399552814fd0ffaa00c598bb60f3203e5378c220..88fbd3598207677563a635ea85d641257bf7360d 100644 --- a/mm/secretmem.c +++ b/mm/secretmem.c @@ -202,6 +202,11 @@ static struct file *secretmem_file_create(unsigned long flags) if (IS_ERR(inode)) return ERR_CAST(inode); + /* + * Not clear S_PRIVATE may cause LSM/SELinux checks to be + * bypassed for secretmem file descriptors. + */ + inode->i_flags &= ~S_PRIVATE; err = security_inode_init_security_anon(inode, &qname, NULL); if (err) { file = ERR_PTR(err);