homedir_template generation skips USER lines
PATCH 1/1 homedir_template generation skips USER lines
The current libsemanage code does not correctly add lines which include USER in them into the homedir_template, for example:
/tmp/gconfd-USER -d system_u:object_r:ROLE_tmp_t
This line was included in the past since it has ROLE. However, with the switch to UBAC separations, the line has changed to:
/tmp/gconfd-USER -d system_u:object_r:user_tmp_t
and is no longer included. The follwing patch fixes.
libsemanage/src/semanage_store.c +2 -1
@@ -983,7 +983,8 @@ int semanage_split_fc(semanage_handle_t * sh)while (fgets_unlocked (buf,PATH_MAX , file_con)) {if (!strncmp (buf,"HOME_DIR" ,8 ) || - !strncmp (buf,"HOME_ROOT" ,9 ) ||strstr (buf,"ROLE" )) { + !strncmp (buf,"HOME_ROOT" ,9 ) ||strstr (buf,"ROLE" ) || +strstr (buf,"USER" )) {/* This contains one of the template variables, write it to homedir.template */ if (write (hd, buf,strlen (buf)) <0 ) { ERR(sh, "Write to %s failed.",
Signature · 9 lines
Chris PeBenito Tresys Technology, LLC (410) 290-1411 x150 -- This message was distributed to subscribers of the selinux mailing list. If you no longer wish to subscribe, send mail to [email protected] with the words "unsubscribe selinux" without quotes as the message.
Quoted 21 lines · Christopher J. PeBenito
The current libsemanage code does not correctly add lines which include USER in them into the
homedir_template, for example:
/tmp/gconfd-USER-d system_u:object_r:ROLE_tmp_tThis line was included in the past since it has ROLE. However, with the switch to UBAC separations, the line has changed to:
/tmp/gconfd-USER-d system_u:object_r:user_tmp_tand is no longer included. The follwing patch fixes.
libsemanage/src/semanage_store.c +0
-0
libsemanage/src/semanage_store.c int semanage_split_fc(semanage_handle_t * sh) · line 990
Quoted 9 lines
libsemanage/src/semanage_store.c +2
-1@@ -983,7 +983,8 @@ int semanage_split_fc(semanage_handle_t * sh)while (fgets_unlocked (buf,PATH_MAX , file_con)) {if (!strncmp (buf,"HOME_DIR" ,8 ) || - !strncmp (buf,"HOME_ROOT" ,9 ) ||strstr (buf,"ROLE" )) { + !strncmp (buf,"HOME_ROOT" ,9 ) ||strstr (buf,"ROLE" ) || +strstr (buf,"USER" )) {/* This contains one of the template variables, write it to homedir.template */ if (write (hd, buf,strlen (buf)) <0 ) { ERR(sh, "Write to %s failed.",
Merged in libsemanage-2.0.29
--
This message was distributed to subscribers of the selinux mailing list. If you no longer wish to subscribe, send mail to [email protected] with the words "unsubscribe selinux" without quotes as the message.