Attachment 56759 Details for Bug 131554

sysvinit-2.86-selinux.patch

sysvinit-2.86-selinux.patch (text/plain), 2.71 KB, created by Dr. Werner Fink on 2005-11-09 13:53:57 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: Dr. Werner Fink

Created: 2005-11-09 13:53:57 UTC

Size: 2.71 KB

patch

obsolete

>--- src/Makefile
>+++ src/Makefile	2005-11-08 18:57:09.000000000 +0100
>@@ -54,10 +54,16 @@
> LCRYPT		= -lcrypt
> endif
> 
>+ifneq ($(wildcard /usr/lib*/libsepol.so),)
>+LSEPOL		= -lsepol -lselinux
>+LSELINUX	= -lselinux
>+CFLAGS		+= -DWITH_SELINUX
>+endif
>+
> all:		$(BIN) $(SBIN) $(USRBIN)
> 
> init:		init.o init_utmp.o
>-		$(CC) $(LDFLAGS) $(STATIC) -o $@ init.o init_utmp.o
>+		$(CC) $(LDFLAGS) $(STATIC) -o $@ init.o init_utmp.o $(LSEPOL)
> 
> halt:		halt.o ifdown.o hddown.o utmp.o reboot.h
> 		$(CC) $(LDFLAGS) -o $@ halt.o ifdown.o hddown.o utmp.o
>@@ -78,7 +84,7 @@
> 		$(CC) $(LDFLAGS) -o $@ runlevel.o
> 
> sulogin:	sulogin.o
>-		$(CC) $(LDFLAGS) $(STATIC) -o $@ sulogin.o $(LCRYPT)
>+		$(CC) $(LDFLAGS) $(STATIC) -o $@ sulogin.o $(LCRYPT) $(LSELINUX)
> 
> wall:		dowall.o wall.o
> 		$(CC) $(LDFLAGS) -o $@ dowall.o wall.o
>--- src/init.c
>+++ src/init.c	2005-11-08 18:52:28.000000000 +0100
>@@ -50,6 +50,10 @@
> #include <stdarg.h>
> #include <sys/syslog.h>
> #include <sys/time.h>
>+#ifdef WITH_SELINUX
>+#  include <selinux/selinux.h>
>+#  include <sepol/sepol.h>
>+#endif
> 
> #ifdef __i386__
> #  if (__GLIBC__ >= 2)
>@@ -2607,6 +2611,9 @@
> 	char			*p;
> 	int			f;
> 	int			isinit;
>+#ifdef WITH_SELINUX
>+	int			enforce = 0;
>+#endif
> 
> 	/* Get my own name */
> 	if ((p = strrchr(argv[0], '/')) != NULL)
>@@ -2670,6 +2677,22 @@
> 		maxproclen += strlen(argv[f]) + 1;
> 	}
> 
>+#ifdef WITH_SELINUX
>+  	if (getenv("SELINUX_INIT") == NULL) {
>+	  putenv("SELINUX_INIT=YES");
>+	  if (selinux_init_load_policy(&enforce) == 0 ) {
>+	    execv(myname, argv);
>+	  } else {
>+	    if (enforce > 0) {
>+	      /* SELinux in enforcing mode but load_policy failed */
>+	      /* At this point, we probably can't open /dev/console, so log() won't work */
>+		    fprintf(stderr,"Enforcing mode requested but no policy loaded. Halting now.\n");
>+	      exit(1);
>+	    }
>+	  }
>+	}
>+#endif
>+  
> 	/* Start booting. */
> 	argv0 = argv[0];
> 	argv[1] = NULL;
>--- src/sulogin.c
>+++ src/sulogin.c	2005-11-08 19:01:24.000000000 +0100
>@@ -30,6 +30,11 @@
> #  include <crypt.h>
> #endif
> 
>+#ifdef WITH_SELINUX
>+#  include <selinux/selinux.h>
>+#  include <selinux/get_context_list.h>
>+#endif
>+
> #define CHECK_DES	1
> #define CHECK_MD5	1
> #define FIXTTY		1
>@@ -374,6 +379,22 @@
> 	signal(SIGINT,  saved_sigint);
> 	signal(SIGTSTP, saved_sigtstp);
> 	signal(SIGQUIT, saved_sigquit);
>+#ifdef WITH_SELINUX
>+	if (is_selinux_enabled > 0) {
>+		security_context_t scon=NULL;
>+		char *seuser=NULL;
>+		char *level=NULL;
>+		if (getseuserbyname("root", &seuser, &level) == 0) {
>+			if (get_default_context_with_level(seuser, level, 0, &scon) > 0) {
>+				if (setexeccon(scon) != 0) 
>+					fprintf(stderr, "setexeccon faile\n");
>+				freecon(scon);
>+			}
>+		}
>+		free(seuser);
>+		free(level);
>+	}
>+#endif
> 	execl(sushell, shell, NULL);
> 	perror(sushell);
>

Actions: View

Attachments on bug 131554: 56759