History log of /external/selinux/libselinux/src/seusers.c
Revision Date Author Comments (<<< Hide modified files) (Show modified files >>>)
aa62cd60f7192123b509c2518e7a2083e34a65a2 29-Nov-2012 Eric Paris <eparis@redhat.com> libselinux: Fix errors found by coverity

Signed-off-by: Eric Paris <eparis@redhat.com>
Acked-by: Dan Walsh <dwalsh@redhat.com>
/external/selinux/libselinux/src/seusers.c
bd8ea2eb6caf103398fef80e41e0ef86ba3892b7 21-Jun-2012 Dan Walsh <dwalsh@redhat.com> libselinux: seusers: Check for strchr failure

If we have a malformed seusers entry we may not find the : proceeding
the level and would thus get a NULL. This can blow up. Check for this
error and bail gracefully. Found by coverity

Signed-off-by: Eric Paris <eparis@redhat.com>
/external/selinux/libselinux/src/seusers.c
5e3171f658d1d2f1e0068f485b3fff7c164e05e4 21-Jun-2012 Eric Paris <eparis@redhat.com> libselinux: seusers: getseuser: gracefully handle NULL service

getseuser() would unconditionally check strlen on the service variable
even though it could be NULL. Whoops. If service is NULL we should
only match on *: entries.

Signed-off-by: Eric Paris <eparis@redhat.com>
/external/selinux/libselinux/src/seusers.c
5b344c112a3cea38d015271509a11e13a06f84b4 21-Jun-2012 Eric Paris <eparis@redhat.com> libselinux: seusers: remove unused lineno

The lineno variable was being incremented, but nothing was being done
with it. Remove it.

Signed-off-by: Eric Paris <eparis@redhat.com>
/external/selinux/libselinux/src/seusers.c
c87df3493d9550429193a8dc7d78a6bfc4c234d3 23-Jan-2012 Daniel P. Berrange <berrange@redhat.com> libselinux: Remove jump over variable declaration

seusers.c: In function ‘getseuser’:
seusers.c:273:3: error: jump skips variable initialization [-Werror=jump-misses-init]
seusers.c:317:2: note: label ‘err’ defined here
seusers.c:274:8: note: ‘fp’ declared here

* seusers.c: Declare FILE *fp at start of getseuser() method

Signed-off-by: Eric Paris <eparis@redhat.com>
Acked-by: Dan Walsh <dwalsh@redhat.com>
/external/selinux/libselinux/src/seusers.c
dd563b35e1f6918e5c96de29ea255b04ad34e891 24-Oct-2011 Dan Walsh <dwalsh@redhat.com> libselinux: seusers: fix to handle large sets of groups

If a user was in too many groups the check_group function might not pass
a large enough buffer to getgrnam_r to handle things. This could return
ERANGE which we then aborted. Instead we should make the buffer larger and
try again.

Signed-off-by: Eric Paris <eparis@redhat.com>
Acked-by: Dan Walsh <dwalsh@redhat.com>
/external/selinux/libselinux/src/seusers.c
532bd9a8926b4123c9444660041f4e9961543577 07-Jul-2009 Daniel J Walsh <dwalsh@redhat.com> Author: Daniel J Walsh
Email: dwalsh@redhat.com
Subject: This patch add seusers support to SELinux
Date: Mon, 18 May 2009 14:20:30 -0400

The idea here is to break the seusers file up into lots of little
seusers file that can be user specific, also adds the service field to
be used by tools like pam_selinux to choose which is the correct context
to log a user in as.

Patch was added to facilitate IPA handing out SELinux content for
selection of roles at login.

Signed-off-by: Joshua Brindle <method@manicmethod.com>
/external/selinux/libselinux/src/seusers.c
13cd4c8960688af11ad23b4c946149015c80d549 19-Aug-2008 Joshua Brindle <method@manicmethod.com> initial import from svn trunk revision 2950
/external/selinux/libselinux/src/seusers.c