shaba/systemd
1
0
Fork 0
mirror of https://github.com/systemd/systemd.git synced 2025-02-09 13:57:42 +03:00
Code

core: don't forget about fallback_smack_process_label

Browse Source 
Call setup_smack() also when only fallback_smack_process_label is set.

Fixes: 75689fb2d41f
(cherry picked from commit 20bbf5ee4c6c80599a91e7a4b7474e931a27db4a)
This commit is contained in:
Łukasz Stelmach 2024-10-23 12:58:36 +02:00 committed by Luca Boccassi
parent 0852240f92
commit 7408f26538
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
src/core/exec-invoke.c
View File

@ -4949,7 +4949,7 @@ int exec_invoke(
#if ENABLE_SMACK
/* LSM Smack needs the capability CAP_MAC_ADMIN to change the current execution security context of the
* process. This is the latest place before dropping capabilities. Other MAC context are set later. */
if (use_smack && context->smack_process_label) {
if (use_smack) {
r = setup_smack(params, context, executable_fd);
if (r < 0 && !context->smack_process_label_ignore) {
*exit_status = EXIT_SMACK_PROCESS_LABEL;