Re: [PATCH 2/4] make newrole suid

[Michael C Thompson <thompsmc@us.ibm.com>]

Michael C Thompson wrote:
> This is the 2nd of 4 patches.
> This patch applies against policycoreutils-1.30.30-1.
> 
> Changes:
>  * main is changed in the following ways:
>    - remove the duplicated functionality for patch 1/4
>    - set to call the new functions
>    - introduces better error handling and cleanup paths
> 
> Signed-off-by: Michael Thompson <thompsmc@us.ibm.com>
> 
> 
> 
> ------------------------------------------------------------------------
> 
> diff -Naur policycoreutils-1.30.30/newrole/newrole.c policycoreutils-1.30.30.suid/newrole/newrole.c
> --- policycoreutils-1.30.30/newrole/newrole.c	2006-10-06 17:01:10.000000000 -0500
> +++ policycoreutils-1.30.30.suid/newrole/newrole.c	2006-10-06 17:00:18.000000000 -0500
<snip>
>  	if (!is_selinux_enabled()) {
> -		fprintf(stderr,
> -			_
> -			("Sorry, newrole may be used only on a SELinux kernel.\n"));
> -		exit(-1);
> +		fprintf(stderr, _("Sorry, newrole may be used only on "
> +			"a SELinux kernel.\n"));
> +		return -1;
>  	}
> -	enforcing = security_getenforce();
> -	if (enforcing < 0) {
> +
> +	if (security_getenforce()) {
>  		fprintf(stderr, _("Could not determine enforcing mode.\n"));
> -		exit(-1);
> +		return -1;
>  	}

Rather embarrassing, but this was overlooked by myself before I sent 
this patch out. It's been fixed on my side.


--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.