Attachment 690424 Details for Bug 881577 – Patch to use SELinux labeling when ever systemd apps call:

[patch] Patch to use SELinux labeling when ever systemd apps call:

util_label.patch (text/plain), 1.23 KB, created by Daniel Walsh on 2013-01-30 15:28:38 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: Daniel Walsh

Created: 2013-01-30 15:28:38 UTC

Size: 1.23 KB

patch

obsolete

>diff --git a/src/shared/util.c b/src/shared/util.c
>index 969ef2b..38497b0 100644
>--- a/src/shared/util.c
>+++ b/src/shared/util.c
>@@ -522,11 +522,16 @@ int get_starttime_of_pid(pid_t pid, unsigned long long *st) {
> 
> int write_one_line_file(const char *fn, const char *line) {
>         _cleanup_fclose_ FILE *f = NULL;
>+        int r;
> 
>         assert(fn);
>         assert(line);
> 
>+        r = label_context_set(fn, S_IFREG);
>+        if (r < 0)
>+                return r;
>         f = fopen(fn, "we");
>+        label_context_clear();
>         if (!f)
>                 return -errno;
> 
>@@ -4138,6 +4143,7 @@ int fopen_temporary(const char *path, FILE **_f, char **_temp_path) {
>         const char *fn;
>         size_t k;
>         int fd;
>+        int r;
> 
>         assert(path);
>         assert(_f);
>@@ -4153,7 +4159,13 @@ int fopen_temporary(const char *path, FILE **_f, char **_temp_path) {
>         t[k] = '.';
>         stpcpy(stpcpy(t+k+1, fn), "XXXXXX");
> 
>+        r = label_context_set(path, S_IFREG);
>+        if (r  < 0) {
>+                free (t);
>+                return r;
>+        }
>         fd = mkostemp(t, O_WRONLY|O_CLOEXEC);
>+        label_context_clear();
>         if (fd < 0) {
>                 free(t);
>                 return -errno;

Actions: View | Diff

Attachments on bug 881577: 654005 | 654006 | 690079 | 690424