Attachment 927881 Details for Bug 1098728 – This patch will make file_context.*.bin match the permissions of the source

[patch] This patch will make file_context.*.bin match the permissions of the source

0001-Compiled-file-context-files-and-the-original-should-.patch (text/plain), 1.48 KB, created by Daniel Walsh on 2014-08-18 13:10:39 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: Daniel Walsh

Created: 2014-08-18 13:10:39 UTC

Size: 1.48 KB

patch

obsolete

>From 51576a7c214767be92f06c373a7b9c248575bf26 Mon Sep 17 00:00:00 2001
>From: Dan Walsh <dwalsh@redhat.com>
>Date: Sat, 16 Aug 2014 07:37:42 -0400
>Subject: [PATCH] Compiled file context files and the original should have the
> same permissions
>
>Currently the compiled file context files can end up with different
>permissions then the original.  This can lead to non priv users
>not being able to read the compiled versions.
>---
> libselinux/utils/sefcontext_compile.c | 10 ++++++++++
> 1 file changed, 10 insertions(+)
>
>diff --git a/libselinux/utils/sefcontext_compile.c b/libselinux/utils/sefcontext_compile.c
>index 0adc968..4aa3fdb 100644
>--- a/libselinux/utils/sefcontext_compile.c
>+++ b/libselinux/utils/sefcontext_compile.c
>@@ -4,6 +4,9 @@
> #include <stdint.h>
> #include <stdio.h>
> #include <string.h>
>+#include <unistd.h>
>+#include <sys/types.h>
>+#include <sys/stat.h>
> 
> #include <linux/limits.h>
> 
>@@ -323,6 +326,7 @@ int main(int argc, char *argv[])
> 	int rc;
> 	char *tmp= NULL;
> 	int fd;
>+	struct stat buf;
> 
> 	if (argc != 2) {
> 		fprintf(stderr, "usage: %s input_file\n", argv[0]);
>@@ -333,6 +337,11 @@ int main(int argc, char *argv[])
> 
> 	path = argv[1];
> 
>+	if (stat(path, &buf) < 0) {
>+		fprintf(stderr, "Can not stat: %s: %m\n", argv[0]);
>+		exit(EXIT_FAILURE);
>+	}
>+
> 	rc = process_file(&data, path);
> 	if (rc < 0)
> 		return rc;
>@@ -352,6 +361,7 @@ int main(int argc, char *argv[])
> 	if (fd < 0)
> 		goto err;
> 
>+	fchmod(fd, buf.st_mode);
> 	rc = write_binary_file(&data, fd);
> 
> 	if (rc < 0)
>-- 
>2.0.4
>

Actions: View | Diff

Attachments on bug 1098728: 927881