Stephen Smalley
authored
Failure to copy the entire av_decision structure, including the flags field, would prevent preservation of the SELINUX_AVD_FLAGS_PERMISSIVE flag and thus cause per-domain permissive to not be honored for userspace permission checks. Also ensure that we clear the entire structure. Signed-off-by:Stephen Smalley <sds@tycho.nsa.gov> (cherry picked from commit 0dbac4ea) Bug: 13450413 Change-Id: I36c7445dc385e647e4f0f4a2dee04723d1b7c9bc