]> git.ipfire.org Git - thirdparty/systemd.git/commit
smack: make mac_smack_fix() deal somewhat sensible with non-absolute paths
authorLennart Poettering <lennart@poettering.net>
Wed, 30 May 2018 16:21:58 +0000 (18:21 +0200)
committerLennart Poettering <lennart@poettering.net>
Thu, 31 May 2018 08:50:50 +0000 (10:50 +0200)
commit6696e2a63188a7e70865f2baa5ae2efc08a42083
tree6abef8fc87fce41238ef12c57dd78a7d46cc6b23
parenta8d1b2422dc2259d0d423b585e46cc5b350925b9
smack: make mac_smack_fix() deal somewhat sensible with non-absolute paths

This tries to improve the mac_smack_fix() logic a bit, by properly
handling non-absolute paths.

It's still pretty broken though, which is sad for security technology:
non-normalized paths (for example "/usr/../dev/sda") will still not be
treated correctly. I am not sure how to fix that properly though, and I
don't understand SMACK well enough to do so. This fix hence just fixes
to most obvious glaring issue.
src/basic/smack-util.c