Re: Change default error handling in libselinux matchpathcon to use syslog instead of stderr.

[Eamon Walsh <ewalsh@tycho.nsa.gov>]

Stephen Smalley wrote:
> On Tue, 2007-09-18 at 13:43 -0400, Joshua Brindle wrote:
>> Stephen Smalley wrote:

[...]

>>> You already can override the callback (set_matchpathcon_printf), but the
>>> claim in the bug report is that isn't usable from a library function
>>> that calls matchpathcon because it doesn't know whether it has already
>>> been set by the application.
>>>   
>> Hrm... so the alternative is to send it to syslog? I don't buy it. Can 
>> we just add an interface to see if the default callbacks have been 
>> overridden?
> 
> Yep.  And it should be based on the newer interfaces.  There is already
> a selinux_set_callback() and adding a selinux_get_callback() should be
> trivial.  setfiles is already rewritten to use the new interfaces in
> trunk, and we should be moving everything off of matchpathcon and onto
> selabel_lookup.

We could add a get function, and/or modify selinux_set_callback(), 
currently void, to return the previous callback in the same way as 
signal(2).

> 
> For RHEL 5, I suppose there might be a matchpathcon-specific interface
> for getting the callback.
> 

-- 
Eamon Walsh <ewalsh@tycho.nsa.gov>
National Security Agency

--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.