diff options
| -rw-r--r-- | src/udev/label.c | 12 | ||||
| -rw-r--r-- | src/udev/label.h | 2 | ||||
| -rw-r--r-- | src/udev/udev-node.c | 6 |
3 files changed, 18 insertions, 2 deletions
diff --git a/src/udev/label.c b/src/udev/label.c index 5698020672..dca2a21228 100644 --- a/src/udev/label.c +++ b/src/udev/label.c @@ -233,3 +233,15 @@ skipped: #endif return mkdir(path, mode) < 0 ? -errno : 0; } + +int label_apply(const char *path, const char *label) { + int r = 0; + +#ifdef HAVE_SELINUX + if (!use_selinux()) + return 0; + + r = setfilecon(path, (char *)label); +#endif + return r; +} diff --git a/src/udev/label.h b/src/udev/label.h index 3d12ac2a92..a8dbcdc8b7 100644 --- a/src/udev/label.h +++ b/src/udev/label.h @@ -34,3 +34,5 @@ int label_context_set(const char *path, mode_t mode); void label_context_clear(void); int label_mkdir(const char *path, mode_t mode, bool apply); + +int label_apply(const char *path, const char *label); diff --git a/src/udev/udev-node.c b/src/udev/udev-node.c index e09c94dedb..76644ccdba 100644 --- a/src/udev/udev-node.c +++ b/src/udev/udev-node.c @@ -306,8 +306,10 @@ static int node_permissions_apply(struct udev_device *dev, bool apply, if (streq(name, "selinux")) { selinux = true; - /* FIXME: hook up libselinux */ - log_error("SECLABEL: failed to set selinux label '%s'", label); + if (label_apply(devnode, label) < 0) + log_error("SECLABEL: failed to set SELinux label '%s'", label); + else + log_debug("SECLABEL: set SELinux label '%s'", label); #ifdef HAVE_SMACK } else if (streq(name, "smack")) { |