diff options
author | Ulrich Drepper <drepper@redhat.com> | 2007-11-06 18:26:44 +0000 |
---|---|---|
committer | Ulrich Drepper <drepper@redhat.com> | 2007-11-06 18:26:44 +0000 |
commit | 7fe4e0e892dad84aaf383bc130f4909f9b4b380d (patch) | |
tree | 3fb397423c34f7eab0ea77dd1d80d2b96b180dbc /nscd | |
parent | b92e378086449e2707b8b2fd3d2f50cc0b8871e9 (diff) | |
download | glibc-7fe4e0e892dad84aaf383bc130f4909f9b4b380d.zip glibc-7fe4e0e892dad84aaf383bc130f4909f9b4b380d.tar.gz glibc-7fe4e0e892dad84aaf383bc130f4909f9b4b380d.tar.bz2 |
* nscd/selinux.c (nscd_request_avc_has_perm): When compiled with
old headers, don't call avc_has_perm if we don't have the
permission information.
Diffstat (limited to 'nscd')
-rw-r--r-- | nscd/selinux.c | 8 |
1 files changed, 8 insertions, 0 deletions
diff --git a/nscd/selinux.c b/nscd/selinux.c index 6cbcbea..9a167ec 100644 --- a/nscd/selinux.c +++ b/nscd/selinux.c @@ -368,6 +368,14 @@ nscd_request_avc_has_perm (int fd, request_type req) goto out; } +#ifndef NSCD__GETSERV + if (perms[req] == 0) + { + dbg_log (_("compile-time support for database policy missing")); + goto out; + } +#endif + rc = avc_has_perm (ssid, tsid, SECCLASS_NSCD, perms[req], &aeref, NULL) < 0; out: |