From: Kylene Jo Hall <kjhall@us.ibm.com>

Thanks to Stephen Smalley for pointing out that we need to securely handle
a failure to register with the LSM security hooks.  This patch adds a panic
in the event that the module is unable to register.

Signed-off-by: Kylene Hall <kjhall@us.ibm.com>
Signed-off-by: Mimi Zohar <zohar@us.ibm.com>
Signed-off-by: Andrew Morton <akpm@osdl.org>
---

 security/slim/slm_main.c |    6 +++++-
 1 files changed, 5 insertions(+), 1 deletion(-)

diff -puN security/slim/slm_main.c~slim-main-patch-handle-failure-to-register security/slim/slm_main.c
--- a/security/slim/slm_main.c~slim-main-patch-handle-failure-to-register
+++ a/security/slim/slm_main.c
@@ -1362,9 +1362,13 @@ int slim_enabled = 1;
 #endif
 static int __init init_slm(void)
 {
+	int rc;
 	if (!slim_enabled)
 		return 0;
 	slm_task_init_alloc_security(current);
-	return register_security(&slm_security_ops);
+	rc = register_security(&slm_security_ops);
+	if (rc != 0)
+		panic("SLIM: Unable to register with kernel\n");
+	return rc;
 }
 security_initcall(init_slm);
_