Attachment 303360 Details for Bug 443667 – Patch to setexeccon no matter what

[patch] Patch to setexeccon no matter what

pam_selinux_close.patch (text/plain), 1.12 KB, created by Daniel Walsh on 2008-04-22 18:53:42 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: Daniel Walsh

Created: 2008-04-22 18:53:42 UTC

Size: 1.12 KB

patch

obsolete

>diff -up Linux-PAM-1.0.0/modules/pam_selinux/pam_selinux.c~ Linux-PAM-1.0.0/modules/pam_selinux/pam_selinux.c
>--- Linux-PAM-1.0.0/modules/pam_selinux/pam_selinux.c~	2008-04-03 08:05:18.000000000 -0400
>+++ Linux-PAM-1.0.0/modules/pam_selinux/pam_selinux.c	2008-04-22 14:50:07.728824000 -0400
>@@ -702,18 +702,16 @@ pam_sm_close_session(pam_handle_t *pamh,
>     free(ttyn);
>     ttyn=NULL;
>   }
>-  if (prev_user_context) {
>-    if (setexeccon(prev_user_context)) {
>-      pam_syslog(pamh, LOG_ERR, "Unable to restore executable context %s.",
>-	       prev_user_context);
>-      if (security_getenforce() == 1)
>-         status = PAM_AUTH_ERR;
>-      else
>-         status = PAM_SUCCESS;
>-    }
>-    freecon(prev_user_context);
>-    prev_user_context = NULL;
>+  if (setexeccon(prev_user_context)) {
>+	  pam_syslog(pamh, LOG_ERR, "Unable to restore executable context %s.",
>+		     prev_user_context);
>+	  if (security_getenforce() == 1)
>+		  status = PAM_AUTH_ERR;
>+	  else
>+		  status = PAM_SUCCESS;
>   }
>+  freecon(prev_user_context);
>+  prev_user_context = NULL;
> 
>   if (debug)
>     pam_syslog(pamh, LOG_NOTICE, "setcontext back to orginal");

Actions: View | Diff

Attachments on bug 443667: 303360