RepoMirrors/selinux
1
0
Fork 0
mirror of https://github.com/SELinuxProject/selinux synced 2025-02-27 06:50:32 +00:00
Code Issues Packages Projects Releases Wiki Activity

libsepol: Check for error from check_assertion_extended_permissions()

Browse Source 
Return an error if check_assertion_extended_permissions() returns
an error instead of treating it as an assertion violation.

Signed-off-by: James Carter <jwcart2@gmail.com>
This commit is contained in:
James Carter 2022-01-11 12:39:13 -05:00
parent a700e426b8
commit 18e1ae1142
1 changed files with 2 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
libsepol/src/assertion.c
View File

@ -481,6 +481,8 @@ static int check_assertion_avtab_match(avtab_key_t *k, avtab_datum_t *d, void *a
if (avrule->specified == AVRULE_XPERMS_NEVERALLOW) {
rc = check_assertion_extended_permissions(avrule, avtab, k, p);
if (rc < 0)
goto oom;
if (rc == 0)
goto nomatch;
}