RepoMirrors/selinux
1
0
Fork 0
mirror of https://github.com/SELinuxProject/selinux synced 2024-12-28 00:42:07 +00:00
Code Issues Packages Projects Releases Wiki Activity
1,383 Commits 4 Branches 723 Tags 22 MiB
C 74.6%
Python 16.2%
Roff 5.2%
SWIG 1.1%
Makefile 1.1%
Other 1.8%
f2e38b609c
Go to file
Nir Soffer f2e38b609c libselinux: Fix restorecon when path has no context 
When a path has no context, for example, when the file was created when
selinux was disabled, selinux.restorecon(path) will fail:

    >>> selinux.restorecon('/etc/multipath.conf.new')
    Traceback (most recent call last):
      File "<stdin>", line 1, in <module>
      File "/usr/lib64/python2.7/site-packages/selinux/__init__.py", line 88,
      in restorecon
        status, oldcontext = lgetfilecon(path)
    OSError: [Errno 61] No data available

This failure does not seems to be useful, as we can successfully match
the context for this path using selinux.matchpathcon(), and set it
successfully using selinux.chcon(). The failure is caused by trying to
avoid the lsetfilecon() call if the current context is does not need
update.

This patch handles this specific error from lgetfilecon(), preventing
this failure.

Signed-off-by: Nir Soffer <nsoffer@redhat.com>
2015-09-22 10:55:57 -04:00
checkpolicy Updated libsepol and checkpolicy ChangeLogs. 2015-09-22 10:54:10 -04:00
libselinux libselinux: Fix restorecon when path has no context 2015-09-22 10:55:57 -04:00
libsemanage Update libsemanage ChangeLog. 2015-09-03 15:41:39 -04:00
libsepol Updated libsepol and checkpolicy ChangeLogs. 2015-09-22 10:54:10 -04:00
policycoreutils Updated policycoreutils ChangeLog. 2015-08-25 15:07:52 -04:00
scripts Add secilc to release script. 2015-03-31 12:41:28 -04:00
secilc libsepol/cil: Add userattribute{set} functionality 2015-09-11 09:07:46 -04:00
sepolgen Updated sepolgen ChangeLog. 2015-08-05 15:16:18 -04:00
.gitignore global: gitignore: add a couple of more editor backup filetypes 2013-02-01 12:14:57 -05:00
Android.mk Add empty top level Android.mk / CleanSpec.mk files 2015-04-16 07:54:09 -04:00
CleanSpec.mk Add empty top level Android.mk / CleanSpec.mk files 2015-04-16 07:54:09 -04:00
Makefile libsepol: Move secilc out of libsepol 2015-03-31 12:31:38 -04:00
README Add further build dependencies. 2015-02-23 09:08:13 -05:00

README 

Please submit all bug reports and patches to selinux@tycho.nsa.gov.
Subscribe via selinux-join@tycho.nsa.gov.

Build dependencies on Fedora:
yum install audit-libs-devel bison bzip2-devel dbus-devel dbus-glib-devel flex flex-devel flex-static glib2-devel libcap-devel libcap-ng-devel pam-devel pcre-devel python-devel setools-devel swig ustr-devel

To build and install everything under a private directory, run:
make DESTDIR=~/obj install install-pywrap

To install as the default system libraries and binaries
(overwriting any previously installed ones - dangerous!),
on x86_64, run:
make LIBDIR=/usr/lib64 SHLIBDIR=/lib64 install install-pywrap relabel
or on x86 (32-bit), run:
make install install-pywrap relabel

This may render your system unusable if the upstream SELinux userspace
lacks library functions or other dependencies relied upon by your
distribution.  If it breaks, you get to keep both pieces.