* [PATCH 14/74] Change get_context_list to return an error rather then
@ 2013-10-24 13:54 Daniel J Walsh
0 siblings, 0 replies; only message in thread
From: Daniel J Walsh @ 2013-10-24 13:54 UTC (permalink / raw)
To: eparis; +Cc: selinux
[-- Attachment #1: Type: text/plain, Size: 673 bytes --]
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
In the past pam_selinux would return a bogus login context if the login program
was running with the wrong context. If you ran sshd as unconfined_t
you might get the login user loggin in as pam_oddjob_mkhomedir_t or some other
bogus
type. This change fixes the code to return an error if it can not return a good
match.
This patch looks good to me. acked.
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.15 (GNU/Linux)
Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/
iEYEARECAAYFAlJpJqQACgkQrlYvE4MpobOkmQCdGD2YBvJx1vg0VkNgsyni6Y4F
WwgAoKAicAI1nPrReds9DLJkSkamj10X
=YR4U
-----END PGP SIGNATURE-----
[-- Warning: decoded text below may be mangled, UTF-8 assumed --]
[-- Attachment #2: 0014-Change-get_context_list-to-return-an-error-rather-th.patch --]
[-- Type: text/x-patch; name="0014-Change-get_context_list-to-return-an-error-rather-th.patch", Size: 0 bytes --]
^ permalink raw reply [flat|nested] only message in thread
only message in thread, other threads:[~2013-10-24 13:54 UTC | newest]
Thread overview: (only message) (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2013-10-24 13:54 [PATCH 14/74] Change get_context_list to return an error rather then Daniel J Walsh
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.