shaba/systemd-stable
1
1
Fork 0
mirror of https://github.com/systemd/systemd-stable.git synced 2025-08-25 13:50:12 +03:00
Code Activity

update-done: set proper selinux context for .updated

Browse Source 
https://bugzilla.redhat.com/show_bug.cgi?id=1121806
This commit is contained in:
Zbigniew Jędrzejewski-Szmek
2014-07-21 20:56:29 -04:00
parent 9f1c19405a
commit 7dbb1d08f6
2 changed files with 21 additions and 5 deletions
Download Patch File Download Diff File Expand all files Collapse all files

1
Makefile.am
View File

@ -1771,6 +1771,7 @@ systemd_update_done_SOURCES = \
systemd_update_done_LDADD = \
libsystemd-internal.la \
libsystemd-label.la \
libsystemd-shared.la
# ------------------------------------------------------------------------------

25
src/update-done/update-done.c
View File

@ -20,6 +20,7 @@
***/
#include "util.h"
#include "label.h"
static int apply_timestamp(const char *path, struct timespec *ts) {
struct timespec twice[2];
@ -51,10 +52,20 @@ static int apply_timestamp(const char *path, struct timespec *ts) {
} else if (errno == ENOENT) {
_cleanup_close_ int fd = -1;
int r;
/* The timestamp file doesn't exist yet? Then let's create it. */
r = label_context_set(path, S_IFREG);
if (r < 0) {
log_error("Failed to set SELinux context for %s: %s",
path, strerror(-r));
return r;
}
fd = open(path, O_CREAT|O_EXCL|O_WRONLY|O_TRUNC|O_CLOEXEC|O_NOCTTY|O_NOFOLLOW, 0644);
label_context_clear();
if (fd < 0) {
if (errno == EROFS) {
@ -83,7 +94,7 @@ static int apply_timestamp(const char *path, struct timespec *ts) {
int main(int argc, char *argv[]) {
struct stat st;
int r, q;
int r, q = 0;
log_set_target(LOG_TARGET_AUTO);
log_parse_environment();
@ -94,11 +105,15 @@ int main(int argc, char *argv[]) {
return EXIT_FAILURE;
}
r = label_init(NULL);
if (r < 0) {
log_error("SELinux setup failed: %s", strerror(-r));
goto finish;
}
r = apply_timestamp("/etc/.updated", &st.st_mtim);
q = apply_timestamp("/var/.updated", &st.st_mtim);
if (q < 0 && r == 0)
r = q;
return r < 0 ? EXIT_FAILURE : EXIT_SUCCESS;
finish:
return r < 0 || q < 0 ? EXIT_FAILURE : EXIT_SUCCESS;
}