mirror of
https://github.com/SELinuxProject/selinux
synced 2024-12-28 17:02:03 +00:00
homedir_template generation skips USER lines
The current libsemanage code does not correctly add lines which include USER in them into the homedir_template, for example: /tmp/gconfd-USER -d system_u:object_r:ROLE_tmp_t This line was included in the past since it has ROLE. However, with the switch to UBAC separations, the line has changed to: /tmp/gconfd-USER -d system_u:object_r:user_tmp_t and is no longer included. The follwing patch fixes. Signed-off-by: Joshua Brindle <method@manicmethod.com>
This commit is contained in:
parent
c35dcc43bc
commit
9e2c58f924
@ -983,7 +983,8 @@ int semanage_split_fc(semanage_handle_t * sh)
|
||||
|
||||
while (fgets_unlocked(buf, PATH_MAX, file_con)) {
|
||||
if (!strncmp(buf, "HOME_DIR", 8) ||
|
||||
!strncmp(buf, "HOME_ROOT", 9) || strstr(buf, "ROLE")) {
|
||||
!strncmp(buf, "HOME_ROOT", 9) || strstr(buf, "ROLE") ||
|
||||
strstr(buf, "USER")) {
|
||||
/* This contains one of the template variables, write it to homedir.template */
|
||||
if (write(hd, buf, strlen(buf)) < 0) {
|
||||
ERR(sh, "Write to %s failed.",
|
||||
|
Loading…
Reference in New Issue
Block a user