SymbX/systemd
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

selinux: use raw variants of security_compute_create and setfscreatecon

Browse Source 
As suggested by Evgeny Vereshchagin as a follow up for
https://github.com/systemd/systemd/pull/2781#issuecomment-191043402.
This commit is contained in:
Zbigniew Jędrzejewski-Szmek
2016-03-02 10:42:27 -05:00
parent c3dacc8bbf
commit 5c5433ad32
1 changed files with 3 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files
src/basic/selinux-util.c
+3 -3
View File
@@ -217,7 +217,7 @@ int mac_selinux_get_create_label_from_exe(const char *exe, char **label) {
return -errno; return -errno;
sclass = string_to_security_class("process"); sclass = string_to_security_class("process");
r = security_compute_create(mycon, fcon, sclass, (security_context_t *) label); r = security_compute_create_raw(mycon, fcon, sclass, (security_context_t *) label);
if (r < 0) if (r < 0)
return -errno; return -errno;
#endif #endif
@@ -296,7 +296,7 @@ int mac_selinux_get_child_mls_label(int socket_fd, const char *exe, const char *
return -ENOMEM; return -ENOMEM;
sclass = string_to_security_class("process"); sclass = string_to_security_class("process");
r = security_compute_create(mycon, fcon, sclass, (security_context_t *) label); r = security_compute_create_raw(mycon, fcon, sclass, (security_context_t *) label);
if (r < 0) if (r < 0)
return -errno; return -errno;
#endif #endif
@@ -350,7 +350,7 @@ int mac_selinux_create_file_prepare(const char *path, mode_t mode) {
log_enforcing("Failed to determine SELinux security context for %s: %m", path); log_enforcing("Failed to determine SELinux security context for %s: %m", path);
} else { } else {
if (setfscreatecon(filecon) >= 0) if (setfscreatecon_raw(filecon) >= 0)
return 0; /* Success! */ return 0; /* Success! */
log_enforcing("Failed to set SELinux security context %s for %s: %m", filecon, path); log_enforcing("Failed to set SELinux security context %s for %s: %m", filecon, path);