devices cgroup: allow mkfifo

[safe/jmp/linux-2.6] / security / device_cgroup.c

diff --git a/security/device_cgroup.c b/security/device_cgroup.c
index cd377b9..3aacd0f 100644 (file)
--- a/security/device_cgroup.c
+++ b/security/device_cgroup.c
@@ -513,6 +513,9 @@ int devcgroup_inode_mknod(int mode, dev_t dev)
        struct dev_cgroup *dev_cgroup;
        struct dev_whitelist_item *wh;
 
+       if (!S_ISBLK(mode) && !S_ISCHR(mode))
+               return 0;
+
        rcu_read_lock();
 
        dev_cgroup = task_devcgroup(current);