diff options
| author | Ulrich Drepper <drepper@redhat.com> | 2007-11-06 18:26:44 +0000 |
|---|---|---|
| committer | Ulrich Drepper <drepper@redhat.com> | 2007-11-06 18:26:44 +0000 |
| commit | 7fe4e0e892dad84aaf383bc130f4909f9b4b380d (patch) | |
| tree | 3fb397423c34f7eab0ea77dd1d80d2b96b180dbc /nscd/selinux.c | |
| parent | b92e378086449e2707b8b2fd3d2f50cc0b8871e9 (diff) | |
| download | glibc-7fe4e0e892dad84aaf383bc130f4909f9b4b380d.tar.gz glibc-7fe4e0e892dad84aaf383bc130f4909f9b4b380d.tar.xz glibc-7fe4e0e892dad84aaf383bc130f4909f9b4b380d.zip | |
* nscd/selinux.c (nscd_request_avc_has_perm): When compiled with
old headers, don't call avc_has_perm if we don't have the permission information.
Diffstat (limited to 'nscd/selinux.c')
| -rw-r--r-- | nscd/selinux.c | 8 |
1 files changed, 8 insertions, 0 deletions
diff --git a/nscd/selinux.c b/nscd/selinux.c index 6cbcbea19c..9a167ec14d 100644 --- a/nscd/selinux.c +++ b/nscd/selinux.c @@ -368,6 +368,14 @@ nscd_request_avc_has_perm (int fd, request_type req) goto out; } +#ifndef NSCD__GETSERV + if (perms[req] == 0) + { + dbg_log (_("compile-time support for database policy missing")); + goto out; + } +#endif + rc = avc_has_perm (ssid, tsid, SECCLASS_NSCD, perms[req], &aeref, NULL) < 0; out: |