From: Christian Göttsche <cgzones@googlemail.com>
Date: Thu, 26 Mar 2020 19:15:17 +0000 (+0100)
Subject: selinux: print enforcing state in access check debug message
X-Git-Tag: v246-rc1~693^2
X-Git-Url: http://git.ipfire.org/gitweb.cgi?a=commitdiff_plain;h=refs%2Fpull%2F15237%2Fhead;p=thirdparty%2Fsystemd.git

selinux: print enforcing state in access check debug message
---

diff --git a/src/core/selinux-access.c b/src/core/selinux-access.c
index e40898d10bc..56448c18f12 100644
--- a/src/core/selinux-access.c
+++ b/src/core/selinux-access.c
@@ -272,8 +272,8 @@ int mac_selinux_generic_access_check(
                         sd_bus_error_setf(error, SD_BUS_ERROR_ACCESS_DENIED, "SELinux policy denies access.");
         }
 
-        log_debug_errno(r, "SELinux access check scon=%s tcon=%s tclass=%s perm=%s path=%s cmdline=%s: %m",
-                        scon, fcon, tclass, permission, path, cl);
+        log_debug_errno(r, "SELinux access check scon=%s tcon=%s tclass=%s perm=%s state=%s path=%s cmdline=%s: %m",
+                        scon, fcon, tclass, permission, enforce ? "enforcing" : "permissive", path, cl);
         return enforce ? r : 0;
 }