Attachment 221063 Details for Bug 177698 – libutil patch updated for 12.2-RELEASE

[patch] libutil patch updated for 12.2-RELEASE

usr_lib_libutil-loginclass-before-label.patch (text/plain), 2.40 KB, created by Kevin Barry on 2020-12-28 23:59:47 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: Kevin Barry

Created: 2020-12-28 23:59:47 UTC

Size: 2.40 KB

patch

obsolete

>--- /usr/src/lib/libutil/login_class.c.orig	2020-12-28 22:55:43.966821000 +0000
>+++ /usr/src/lib/libutil/login_class.c	2020-12-28 23:01:01.881472000 +0000
>@@ -443,7 +443,7 @@
> 
>     /* we need a passwd entry to set these */
>     if (pwd == NULL)
>-	flags &= ~(LOGIN_SETGROUP | LOGIN_SETLOGIN | LOGIN_SETMAC);
>+	flags &= ~(LOGIN_SETGROUP | LOGIN_SETLOGIN);
> 
>     /* Set the process priority */
>     if (flags & LOGIN_SETPRIORITY) {
>@@ -488,31 +488,6 @@
> 	}
>     }
> 
>-    /* Set up the user's MAC label. */
>-    if ((flags & LOGIN_SETMAC) && mac_is_present(NULL) == 1) {
>-	const char *label_string;
>-	mac_t label;
>-
>-	label_string = login_getcapstr(lc, "label", NULL, NULL);
>-	if (label_string != NULL) {
>-	    if (mac_from_text(&label, label_string) == -1) {
>-		syslog(LOG_ERR, "mac_from_text('%s') for %s: %m",
>-		    pwd->pw_name, label_string);
>-		return (-1);
>-	    }
>-	    if (mac_set_proc(label) == -1)
>-		error = errno;
>-	    else
>-		error = 0;
>-	    mac_free(label);
>-	    if (error != 0) {
>-		syslog(LOG_ERR, "mac_set_proc('%s') for %s: %s",
>-		    label_string, pwd->pw_name, strerror(error));
>-		return (-1);
>-	    }
>-	}
>-    }
>-
>     /* Set the sessions login */
>     if ((flags & LOGIN_SETLOGIN) && setlogin(pwd->pw_name) != 0) {
> 	syslog(LOG_ERR, "setlogin(%s): %m", pwd->pw_name);
>@@ -544,6 +519,31 @@
>     mymask = (flags & LOGIN_SETUMASK) ? umask(LOGIN_DEFUMASK) : 0;
>     mymask = setlogincontext(lc, pwd, mymask, flags);
>     login_close(llc);
>+
>+    /* Set up the user's MAC label. */
>+    if ((flags & LOGIN_SETMAC) && mac_is_present(NULL) == 1) {
>+        const char *label_string;
>+        mac_t label;
>+
>+        label_string = login_getcapstr(lc, "label", NULL, NULL);
>+        if (label_string != NULL) {
>+            if (mac_from_text(&label, label_string) == -1) {
>+                syslog(LOG_ERR, "mac_from_text('%s') for %s: %m",
>+                    pwd->pw_name, label_string);
>+                return (-1);
>+            }
>+            if (mac_set_proc(label) == -1)
>+                error = errno;
>+            else
>+                error = 0;
>+            mac_free(label);
>+            if (error != 0) {
>+                syslog(LOG_ERR, "mac_set_proc('%s') for %s: %s",
>+                    label_string, pwd->pw_name, strerror(error));
>+                return (-1);
>+            }
>+        }
>+    }
> 
>     /* This needs to be done after anything that needs root privs */
>     if ((flags & LOGIN_SETUSER) && setuid(uid) != 0) {

Actions: View | Diff

Attachments on bug 177698: 133258 | 133259 | 133260 | 221063