]> git.ipfire.org Git - thirdparty/systemd.git/commit
selinux: fork label-aware children with up-to-date label database 16821/head
authorChristian Göttsche <cgzones@googlemail.com>
Sat, 22 Aug 2020 18:42:22 +0000 (20:42 +0200)
committerChristian Göttsche <cgzones@googlemail.com>
Thu, 27 Aug 2020 08:28:53 +0000 (10:28 +0200)
commit2df2152c206bd2fa8e8d086feeb0555f5b7152c9
tree90493d10a4b51fe50d78de0e417b0f5f4807d1c2
parentfd5e402fa9377f2860e02bdb5b84d5f5942e73f4
selinux: fork label-aware children with up-to-date label database

The parent process may not perform any label operation, so the
database might not get updated on a SELinux policy change on its own.

Reload the label database once on a policy change, instead of n times
in every started child.
src/core/execute.c
src/udev/udevd.c