From: Andreas Schwab <schwab@redhat.com>
Date: Fri, 2 Sep 2011 09:13:39 +0000 (+0200)
Subject: Don't start AVC thread until credentials are installed
X-Git-Tag: glibc-2.15~116
X-Git-Url: http://git.ipfire.org/?a=commitdiff_plain;h=a9ae54a136d743103cd9e266c7d22769ea440c09;p=thirdparty%2Fglibc.git

Don't start AVC thread until credentials are installed
---

diff --git a/ChangeLog b/ChangeLog
index 28b9a43ef81..a65182acf94 100644
--- a/ChangeLog
+++ b/ChangeLog
@@ -1,5 +1,8 @@
 2011-11-03  Andreas Schwab  <schwab@redhat.com>
 
+	* nscd/nscd.c (main): Don't start AVC thread until credentials are
+	installed.
+
 	* nss/makedb.c (set_file_creation_context): Do nothing if SELinux
 	is disabled.
 
diff --git a/nscd/nscd.c b/nscd/nscd.c
index e9bb75d3e94..be693c9d5c5 100644
--- a/nscd/nscd.c
+++ b/nscd/nscd.c
@@ -263,10 +263,6 @@ main (int argc, char **argv)
     /* In foreground mode we are not paranoid.  */
     paranoia = 0;
 
-  /* Start the SELinux AVC.  */
-  if (selinux_enabled)
-    nscd_avc_init ();
-
   signal (SIGINT, termination_handler);
   signal (SIGQUIT, termination_handler);
   signal (SIGTERM, termination_handler);
@@ -294,6 +290,10 @@ main (int argc, char **argv)
   /* Init databases.  */
   nscd_init ();
 
+  /* Start the SELinux AVC.  */
+  if (selinux_enabled)
+    nscd_avc_init ();
+
   /* Handle incoming requests */
   start_threads ();