Attachment 144321 Details for Bug 220487 – pam_namespace patch

[patch] pam_namespace patch

pam-namespace-keep-level.diff (text/plain), 1.80 KB, created by Klaus Weidner on 2006-12-22 22:45:51 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: Klaus Weidner

Created: 2006-12-22 22:45:51 UTC

Size: 1.80 KB

patch

obsolete

>diff -ur Linux-PAM-0.99.6.2/modules/pam_namespace/pam_namespace.c Linux-PAM-0.99.6.2-kw/modules/pam_namespace/pam_namespace.c
>--- Linux-PAM-0.99.6.2/modules/pam_namespace/pam_namespace.c	2006-12-21 07:23:13.000000000 -0600
>+++ Linux-PAM-0.99.6.2-kw/modules/pam_namespace/pam_namespace.c	2006-12-21 07:24:01.000000000 -0600
>@@ -497,6 +497,17 @@
> 		context_t fcontext = NULL;
> 		rc = PAM_SESSION_ERR;
> 
>+		if (idata->flags & PAMNS_USE_CURRENT_LEVEL) {
>+			/* replace execcon with current process context */
>+			freecon(scon);
>+			rc = getcon(&scon);
>+			if (rc < 0 || scon == NULL) {
>+				pam_syslog(idata->pamh, LOG_ERR, 
>+					   "Error getting exec context, %m");
>+				return PAM_SESSION_ERR;
>+			}
>+		}
>+
> 		scontext = context_new(scon);
> 		if (! scontext) {
> 			pam_syslog(idata->pamh, LOG_ERR, "out of memory");
>@@ -1229,6 +1240,8 @@
> 			return PAM_SESSION_ERR;
> 		}
> 	}
>+        if (strcmp(argv[i], "use_current_level") == 0)
>+            idata.flags |= PAMNS_USE_CURRENT_LEVEL;
>     }
>     if (idata.flags & PAMNS_DEBUG)
>         pam_syslog(idata.pamh, LOG_DEBUG, "open_session - start");
>diff -ur Linux-PAM-0.99.6.2/modules/pam_namespace/pam_namespace.h Linux-PAM-0.99.6.2-kw/modules/pam_namespace/pam_namespace.h
>--- Linux-PAM-0.99.6.2/modules/pam_namespace/pam_namespace.h	2006-12-21 07:23:13.000000000 -0600
>+++ Linux-PAM-0.99.6.2-kw/modules/pam_namespace/pam_namespace.h	2006-12-21 07:22:34.000000000 -0600
>@@ -88,6 +88,7 @@
> #define PAMNS_IGN_CONFIG_ERR  0x00004000 /* Ignore format error in conf file */
> #define PAMNS_IGN_INST_PARENT_MODE  0x00008000 /* Ignore instance parent mode */
> #define PAMNS_NO_UNMOUNT_ON_CLOSE  0x00010000 /* no unmount at session close */
>+#define PAMNS_USE_CURRENT_LEVEL  0x00020000 /* MLS level from getcon not execcon */
> 
> /*
>  * Polyinstantiation method options, based on user, security context

Actions: View | Diff

Attachments on bug 220487: 144235 | 144260 | 144261 | 144314 | 144321 | 144325 | 144326 | 144865 | 144869 | 144870 | 144876 | 145433