[PATCH] --secontext: Implement displaying of expected context upon mismatch

Dmitry V. Levin ldv at altlinux.org
Mon Jan 3 16:18:25 UTC 2022


On Mon, Jan 03, 2022 at 05:02:30PM +0100, Renaud Métrich wrote:
> OK fixing this then to just avoid checking anything.
> 
> @@ -190,10 +190,10 @@ char *
>   secontext_full_file(const char *filename, bool mismatch)
>   {
>          char *context = raw_secontext_full_file(filename);
> -       if (mismatch) {
> +       if (context && mismatch) {

No, this apparently makes linkat--secontext_mismatch.gen and
linkat--secontext_full_mismatch.gen fail instead of skipping on systems
where selinux is not enabled.


-- 
ldv


More information about the Strace-devel mailing list