aboutsummaryrefslogtreecommitdiff
path: root/nscd
diff options
context:
space:
mode:
authorUlrich Drepper <drepper@redhat.com>2007-11-06 18:26:44 +0000
committerUlrich Drepper <drepper@redhat.com>2007-11-06 18:26:44 +0000
commit7fe4e0e892dad84aaf383bc130f4909f9b4b380d (patch)
tree3fb397423c34f7eab0ea77dd1d80d2b96b180dbc /nscd
parentb92e378086449e2707b8b2fd3d2f50cc0b8871e9 (diff)
downloadglibc-7fe4e0e892dad84aaf383bc130f4909f9b4b380d.zip
glibc-7fe4e0e892dad84aaf383bc130f4909f9b4b380d.tar.gz
glibc-7fe4e0e892dad84aaf383bc130f4909f9b4b380d.tar.bz2
* nscd/selinux.c (nscd_request_avc_has_perm): When compiled with
old headers, don't call avc_has_perm if we don't have the permission information.
Diffstat (limited to 'nscd')
-rw-r--r--nscd/selinux.c8
1 files changed, 8 insertions, 0 deletions
diff --git a/nscd/selinux.c b/nscd/selinux.c
index 6cbcbea..9a167ec 100644
--- a/nscd/selinux.c
+++ b/nscd/selinux.c
@@ -368,6 +368,14 @@ nscd_request_avc_has_perm (int fd, request_type req)
goto out;
}
+#ifndef NSCD__GETSERV
+ if (perms[req] == 0)
+ {
+ dbg_log (_("compile-time support for database policy missing"));
+ goto out;
+ }
+#endif
+
rc = avc_has_perm (ssid, tsid, SECCLASS_NSCD, perms[req], &aeref, NULL) < 0;
out: