summaryrefslogtreecommitdiffstats
path: root/src
diff options
context:
space:
mode:
authorChristian Göttsche <cgzones@googlemail.com>2021-05-14 14:14:25 +0200
committerChristian Göttsche <cgzones@googlemail.com>2021-05-14 16:53:04 +0200
commit57e70396dfdc6835c4a9141d29043e4af407205d (patch)
treee49e170a5034c5eec81a72c1f1ad54928b06d589 /src
parentselinux: reload label db on policy load with libselinux 3.2 (diff)
downloadsystemd-57e70396dfdc6835c4a9141d29043e4af407205d.tar.xz
systemd-57e70396dfdc6835c4a9141d29043e4af407205d.zip
selinux: invoke selinux_set_callback(3) more type-safe
Diffstat (limited to 'src')
-rw-r--r--src/core/selinux-access.c4
-rw-r--r--src/core/selinux-setup.c6
2 files changed, 3 insertions, 7 deletions
diff --git a/src/core/selinux-access.c b/src/core/selinux-access.c
index cdb82dd894..d077d5dea7 100644
--- a/src/core/selinux-access.c
+++ b/src/core/selinux-access.c
@@ -162,8 +162,8 @@ static int access_init(sd_bus_error *error) {
return sd_bus_error_setf(error, SD_BUS_ERROR_ACCESS_DENIED, "Failed to open the SELinux AVC: %s", strerror_safe(saved_errno));
}
- selinux_set_callback(SELINUX_CB_AUDIT, (union selinux_callback) audit_callback);
- selinux_set_callback(SELINUX_CB_LOG, (union selinux_callback) log_callback);
+ selinux_set_callback(SELINUX_CB_AUDIT, (union selinux_callback) { .func_audit = audit_callback });
+ selinux_set_callback(SELINUX_CB_LOG, (union selinux_callback) { .func_log = log_callback });
initialized = true;
return 1;
diff --git a/src/core/selinux-setup.c b/src/core/selinux-setup.c
index 1ac05b81e8..2bafbee3eb 100644
--- a/src/core/selinux-setup.c
+++ b/src/core/selinux-setup.c
@@ -30,16 +30,12 @@ int mac_selinux_setup(bool *loaded_policy) {
usec_t before_load, after_load;
char *con;
int r;
- static const union selinux_callback cb = {
- .func_log = null_log,
- };
-
bool initialized = false;
assert(loaded_policy);
/* Turn off all of SELinux' own logging, we want to do that */
- selinux_set_callback(SELINUX_CB_LOG, cb);
+ selinux_set_callback(SELINUX_CB_LOG, (union selinux_callback) { .func_log = null_log });
/* Don't load policy in the initrd if we don't appear to have
* it. For the real root, we check below if we've already