| aa62cd60f7192123b509c2518e7a2083e34a65a2 |
|
29-Nov-2012 |
Eric Paris <eparis@redhat.com> |
libselinux: Fix errors found by coverity
Signed-off-by: Eric Paris <eparis@redhat.com>
Acked-by: Dan Walsh <dwalsh@redhat.com>
/external/selinux/libselinux/src/seusers.c
|
| bd8ea2eb6caf103398fef80e41e0ef86ba3892b7 |
|
21-Jun-2012 |
Dan Walsh <dwalsh@redhat.com> |
libselinux: seusers: Check for strchr failure
If we have a malformed seusers entry we may not find the : proceeding
the level and would thus get a NULL. This can blow up. Check for this
error and bail gracefully. Found by coverity
Signed-off-by: Eric Paris <eparis@redhat.com>
/external/selinux/libselinux/src/seusers.c
|
| 5e3171f658d1d2f1e0068f485b3fff7c164e05e4 |
|
21-Jun-2012 |
Eric Paris <eparis@redhat.com> |
libselinux: seusers: getseuser: gracefully handle NULL service
getseuser() would unconditionally check strlen on the service variable
even though it could be NULL. Whoops. If service is NULL we should
only match on *: entries.
Signed-off-by: Eric Paris <eparis@redhat.com>
/external/selinux/libselinux/src/seusers.c
|
| 5b344c112a3cea38d015271509a11e13a06f84b4 |
|
21-Jun-2012 |
Eric Paris <eparis@redhat.com> |
libselinux: seusers: remove unused lineno
The lineno variable was being incremented, but nothing was being done
with it. Remove it.
Signed-off-by: Eric Paris <eparis@redhat.com>
/external/selinux/libselinux/src/seusers.c
|
| c87df3493d9550429193a8dc7d78a6bfc4c234d3 |
|
23-Jan-2012 |
Daniel P. Berrange <berrange@redhat.com> |
libselinux: Remove jump over variable declaration
seusers.c: In function ‘getseuser’:
seusers.c:273:3: error: jump skips variable initialization [-Werror=jump-misses-init]
seusers.c:317:2: note: label ‘err’ defined here
seusers.c:274:8: note: ‘fp’ declared here
* seusers.c: Declare FILE *fp at start of getseuser() method
Signed-off-by: Eric Paris <eparis@redhat.com>
Acked-by: Dan Walsh <dwalsh@redhat.com>
/external/selinux/libselinux/src/seusers.c
|
| dd563b35e1f6918e5c96de29ea255b04ad34e891 |
|
24-Oct-2011 |
Dan Walsh <dwalsh@redhat.com> |
libselinux: seusers: fix to handle large sets of groups
If a user was in too many groups the check_group function might not pass
a large enough buffer to getgrnam_r to handle things. This could return
ERANGE which we then aborted. Instead we should make the buffer larger and
try again.
Signed-off-by: Eric Paris <eparis@redhat.com>
Acked-by: Dan Walsh <dwalsh@redhat.com>
/external/selinux/libselinux/src/seusers.c
|
| 532bd9a8926b4123c9444660041f4e9961543577 |
|
07-Jul-2009 |
Daniel J Walsh <dwalsh@redhat.com> |
Author: Daniel J Walsh
Email: dwalsh@redhat.com
Subject: This patch add seusers support to SELinux
Date: Mon, 18 May 2009 14:20:30 -0400
The idea here is to break the seusers file up into lots of little
seusers file that can be user specific, also adds the service field to
be used by tools like pam_selinux to choose which is the correct context
to log a user in as.
Patch was added to facilitate IPA handing out SELinux content for
selection of roles at login.
Signed-off-by: Joshua Brindle <method@manicmethod.com>
/external/selinux/libselinux/src/seusers.c
|
| 13cd4c8960688af11ad23b4c946149015c80d549 |
|
19-Aug-2008 |
Joshua Brindle <method@manicmethod.com> |
initial import from svn trunk revision 2950
/external/selinux/libselinux/src/seusers.c
|