]> git.ipfire.org Git - thirdparty/systemd.git/commit
socket-label: apply SMACK label to socket and its file descriptor 39772/head
authorMarc-Antoine Riou <marc-antoine.riou@iot.bzh>
Thu, 6 Nov 2025 10:21:12 +0000 (10:21 +0000)
committerYu Watanabe <watanabe.yu+github@gmail.com>
Thu, 20 Nov 2025 00:59:37 +0000 (09:59 +0900)
commit360f750b01eb713dcf40ac5c3d963b0a6b398e2f
treea1bb703a0e3c3d399482c9b9b99add272cdc36aa
parentcb4b36928a3bae9abe614260f1bd1ef7ab7ff30d
socket-label: apply SMACK label to socket and its file descriptor

When a socket unit specifies SmackLabel=, the label was previously
not applied to the underlying Unix socket file or its file descriptor.
This change ensures that the SMACK label is applied both to the
socket path on the filesystem and to the opened socket FD.
src/core/socket.c
src/shared/socket-label.c
src/shared/socket-label.h
src/shared/socket-netlink.c