diff options
| author | Lennart Poettering <lennart@poettering.net> | 2024-10-21 22:43:18 +0200 |
|---|---|---|
| committer | Lennart Poettering <lennart@poettering.net> | 2024-10-22 17:51:26 +0200 |
| commit | 64053bed083d24f2151d05951935d0804173e657 (patch) | |
| tree | 29b01d0b1a60537abad5c047e5be5658c49b7bc8 /src/test | |
| parent | fs-util: don't second guess openat_report_new() return values (diff) | |
| download | systemd-64053bed083d24f2151d05951935d0804173e657.tar.xz systemd-64053bed083d24f2151d05951935d0804173e657.zip | |
fs-util: always call label post ops in xopenat_full(), in both success and error path
For SELinux it is essential that we reset the file creation label both
in the success and in the error path, hence do so.
Moreover, when calling the label post ops do it if possible with the
opened fd of the inode itself, rather than always going via its path,
simply to reduce the attack surface.
Diffstat (limited to 'src/test')
0 files changed, 0 insertions, 0 deletions