coreutils
[Top][All Lists]
Advanced

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

[PATCH] chcon: do not validte security context if SElinux is disabled


From: Kamil Dudka
Subject: [PATCH] chcon: do not validte security context if SElinux is disabled
Date: Mon, 2 Dec 2019 14:02:02 +0100

* src/chcon.c (main): Skip call of security_check_context()
in case SELinux is disabled to avoid unnecessary failure.

Bug: https://bugzilla.redhat.com/1777831
---
 src/chcon.c | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/src/chcon.c b/src/chcon.c
index 674a244c4..a024d1d8d 100644
--- a/src/chcon.c
+++ b/src/chcon.c
@@ -18,6 +18,7 @@
 #include <stdio.h>
 #include <sys/types.h>
 #include <getopt.h>
+#include <selinux/selinux.h>
 
 #include "system.h"
 #include "dev-ino.h"
@@ -557,7 +558,8 @@ main (int argc, char **argv)
   else
     {
       specified_context = argv[optind++];
-      if (security_check_context (se_const (specified_context)) < 0)
+      if (is_selinux_enabled()
+          && (security_check_context (se_const (specified_context)) < 0))
         die (EXIT_FAILURE, errno, _("invalid context: %s"),
              quote (specified_context));
     }
-- 
2.20.1




reply via email to

[Prev in Thread] Current Thread [Next in Thread]