-
Notifications
You must be signed in to change notification settings - Fork 360
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
libselinux: selabel_digest -b x/media/db error #427
Comments
jwcart2
pushed a commit
to jwcart2/selinux
that referenced
this issue
Mar 20, 2024
Since commit 65c8fd4 ("libselinux: fail selabel_open(3) on invalid option") selabel_open(3) rejects options not supported for the respective backend. Pass SELABEL_OPT_BASEONLY only if the file backend is selected. Reported-by: zgzxx (SELinuxProject#427) Fixes: 65c8fd4 ("libselinux: fail selabel_open(3) on invalid option") Signed-off-by: Christian Göttsche <cgzones@googlemail.com> Acked-by: James Carter <jwcart2@gmail.com>
jwcart2
pushed a commit
that referenced
this issue
Mar 20, 2024
Since commit 65c8fd4 ("libselinux: fail selabel_open(3) on invalid option") selabel_open(3) rejects options not supported for the respective backend. Pass SELABEL_OPT_BASEONLY only if the file backend is selected. Reported-by: zgzxx (#427) Fixes: 65c8fd4 ("libselinux: fail selabel_open(3) on invalid option") Signed-off-by: Christian Göttsche <cgzones@googlemail.com> Acked-by: James Carter <jwcart2@gmail.com>
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
After the commit 65c8fd4, the following error is reported:
libselinux/utils/selabel_digest.c +74
The main function sets the type to SELABEL_OPT_PATH, SELABEL_OPT_BASEONLY and SELABEL_OPT_DIGEST.
libselinux/src/label_media.c +85
In init, the supported types are SELABEL_OPT_PATH, SELABEL_OPT_UNUSED, SELABEL_OPT_VALIDATE and SELABEL_OPT_DIGEST.
Type SELABEL_OPT_BASEONLY is not supported.
So when we go to type SELABEL_OPT_BASEONLY, the init func return failure.
The text was updated successfully, but these errors were encountered: