• M
    selinux: Use raw contexts · 9674f2c6
    Martin Kletzander 提交于
    We are currently able to work only with non-translated SELinux
    contexts, but we are using functions that work with translated
    contexts throughout the code.  This patch swaps all SELinux context
    translation relative calls with their raw sisters to avoid parsing
    problems.
    
    The problems can be experienced with mcstrans for example.  The
    difference is that if you have translations enabled (yum install
    mcstrans; service mcstrans start), fgetfilecon_raw() will get you
    something like 'system_u:object_r:virt_image_t:s0', whereas
    fgetfilecon() will return 'system_u:object_r:virt_image_t:SystemLow'
    that we cannot parse.
    
    I was trying to confirm that the _raw variants were here since the dawn of
    time, but the only thing I see now is that it was imported together in
    the upstream repo [1] from svn, so before 2008.
    
    Thanks Laurent Bigonville for finding this out.
    
    [1] http://oss.tresys.com/git/selinux.git
    9674f2c6
security_selinux.c 59.6 KB