diff options
| author | Daniel Mack <github@zonque.org> | 2015-08-04 14:27:09 +0200 |
|---|---|---|
| committer | Daniel Mack <github@zonque.org> | 2015-08-04 14:27:09 +0200 |
| commit | ee80b4b2977186883aab6b90adcb87c7a4b24ea3 (patch) | |
| tree | fc00d0ef4918737450f6872cd9b547db27bd1804 /src/udev/udev-node.c | |
| parent | 5977db2a3acd86214ad214fe692fd354f46c5955 (diff) | |
| parent | e419a0e31089994ecd1d9019c791e63d13b37584 (diff) | |
Merge pull request #860 from walyong/smack_v11
Smack v11: set only the default smack process label if the command path has no execute label
Diffstat (limited to 'src/udev/udev-node.c')
| -rw-r--r-- | src/udev/udev-node.c | 4 |
1 files changed, 2 insertions, 2 deletions
diff --git a/src/udev/udev-node.c b/src/udev/udev-node.c index d824172b89..e730fb45f1 100644 --- a/src/udev/udev-node.c +++ b/src/udev/udev-node.c @@ -309,7 +309,7 @@ static int node_permissions_apply(struct udev_device *dev, bool apply, } else if (streq(name, "smack")) { smack = true; - r = mac_smack_apply(devnode, label); + r = mac_smack_apply(devnode, SMACK_ATTR_ACCESS, label); if (r < 0) log_error_errno(r, "SECLABEL: failed to set SMACK label '%s': %m", label); else @@ -323,7 +323,7 @@ static int node_permissions_apply(struct udev_device *dev, bool apply, if (!selinux) mac_selinux_fix(devnode, true, false); if (!smack) - mac_smack_apply(devnode, NULL); + mac_smack_apply(devnode, SMACK_ATTR_ACCESS, NULL); } /* always update timestamp when we re-use the node, like on media change events */ |