Re: [PATCH] enable/disable context translation in libselinux

[Linda Knippers <linda.knippers@hp.com>]

Klaus Weidner wrote:
> On Wed, Oct 04, 2006 at 12:52:37PM -0400, Linda Knippers wrote:
> 
>>--- libselinux-1.30.28/src/setrans_client.c     2006-09-13 13:37:04.000000000 -0400
>>+++ libselinux-1.30.28.ljk/src/setrans_client.c 2006-10-04 11:35:48.000000000 -0400
>>@@ -17,6 +17,7 @@
>> #include "setrans_internal.h"
>>
>> static int mls_enabled = -1;
>>+static int trans_enabled = 1;
> 
> [...]
> 
>>+void selinux_set_translation (int value)
>>+{
>>+       trans_enabled = value;
>>+       return;
>>+}
> 
> 
> This is unsafe for multithreading - mls_enabled won't change during the
> lifetime of a process, but it could cause strange results when a thread
> toggling translation affects the results returned by another thread.
> 
> Does anyone care? Alternatively, should the interface offer a translation
> flag parameter, with a backwards compatible function that sets the
> translation flag to "true"?
> 
> -Klaus

I think this whole thing is being reworked by Darrel so maybe you want
to wait until he posts something.

-- ljk

--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.