RepoMirrors/selinux
1
0
Fork 0
mirror of https://github.com/SELinuxProject/selinux synced 2024-12-24 15:02:44 +00:00
Code Issues Packages Projects Releases Wiki Activity
837 Commits 4 Branches 723 Tags 22 MiB
e4488ecd87
Commit Graph

10 Commits

Author SHA1 Message Date
Dan Walsh
2540b20096 Laurent Bigonville patch to fix various minor manpage issues and correct section numbering. 2013-10-24 13:58:37 -04:00
Dan Walsh
e23c73a167 policycoreutils: newrole: do not drop capabilities when newrole is run as root 
If you run newrole as root and it drops capabilities, the next shell
script does not have any capabilities and can not function.

newrole -L TopSecret

Would end up with a root shell and no capabilities.

Signed-off-by: Eric Paris <eparis@redhat.com>
Acked-by: Dan Walsh <dwalsh@redhat.com>
 2012-09-12 12:16:01 -04:00
Dan Walsh
40b0cea919 policycoreutils: newrole: Use correct capng calls in newrole 
Signed-off-by: Eric Paris <eparis@redhat.com>
Acked-by: Dan Walsh <dwalsh@redhat.com>
 2012-03-28 14:52:13 -04:00
Eric Paris
468bff0952 tree: Makefiles: syntax, convert all ${VAR} to $(VAR) 
This is purely personal preference.  Most of the Makefiles use $() for
Makefile variables, but a couple of places use ${}.  Since this obscured
some later Makefile changes I figured I'd just make them all the same up
front.

Signed-off-by: Eric Paris <eparis@redhat.com>
Acked-by: Dan Walsh <dwalsh@redhat.com>
 2011-11-02 15:37:08 -04:00
Eric Paris
e3ffa8c31f policycoreutils: newrole retain CAP_SETPCAP 
We retain CAP_SETPCAP so that we can drop the additional capabilities
we held onto to set up namespaces.

While we are at it, just add some console whine in case things fail.

Signed-off-by: Eric Paris <eparis@redhat.com>
Acked-by: Dan Walsh <dwalsh@redhat.com>
 2011-08-03 18:02:36 -04:00
Steve Lawrence
cba027c249 Exit newrole if capabilities can't be dropped 
Signed-off-by: Steve Lawrence <slawrence@tresys.com>
 2010-12-20 15:13:33 -05:00
Daniel J Walsh
16d1c1cbe5 Move newrole to use libcap-ng 
Signed-off-by: Steve Lawrence <slawrence@tresys.com>
 2010-12-20 15:13:28 -05:00
Chad Sellers
3084b9a1f9 Fix double free in newrole when it fails to exec. 
Signed-off-by: Chad Sellers <csellers@tresys.com>
 2009-12-30 16:59:48 -05:00
Joshua Brindle
bcd43e0bf1 Author: Daniel J Walsh 
Email: dwalsh@redhat.com
Subject: newrole error message corrections.
Date: Fri, 07 Nov 2008 09:37:52 -0500

Signed-off-by: Joshua Brindle <method@manicmethod.com>
 2008-11-07 16:49:04 -05:00
Joshua Brindle
13cd4c8960 initial import from svn trunk revision 2950 2008-08-19 15:30:36 -04:00