Files
systemd/src/basic
Christian Göttsche c46c768811 selinux: reload label db on policy load with libselinux 3.2
Currently the label database is not reloaded with libselinux 3.2 on a
policy reload.

Since libselinux 3.2 avc_open(3) uses the SELinux status page instead of
a netlink socket to check for policy reloads.
The status page is also queried in mac_selinux_maybe_reload().
Thus calls to selinux_check_access(3) might consume an update, queried
by selinux_status_updated(3), leaving mac_selinux_maybe_reload() unable
to detect a policy reload.

Do not use selinux_status_updated(3), use selinux_status_policyload(3)
unconditionally.

Relevant libselinux commit: https://github.com/SELinuxProject/selinux/commit/05bdc03130d741e53e1fb45a958d0a2c184be503

Debian Bullseye is going to ship libselinux 3.1, so stay compatible for
backports.
2021-05-14 14:12:39 +02:00
..
2021-04-20 18:39:36 +02:00
2020-11-09 13:23:58 +09:00
2021-02-22 20:10:55 +01:00
2021-03-11 09:21:07 +01:00
2021-03-11 09:21:07 +01:00
2021-05-12 10:19:19 +09:00
2021-05-12 10:19:19 +09:00
2021-02-18 16:38:27 +01:00
…
2020-11-18 11:15:05 +01:00
2020-11-09 13:23:58 +09:00
2021-03-31 21:43:45 +02:00
2021-05-07 14:38:48 +01:00
2021-03-07 12:15:42 +01:00
2021-03-05 07:10:13 +09:00
2021-05-09 14:36:19 +09:00
2021-03-18 11:59:31 +01:00
2021-04-08 13:00:50 +02:00
2021-02-16 17:15:11 +01:00
2021-03-08 12:31:46 +01:00
2021-03-08 12:31:46 +01:00
2021-03-08 12:31:46 +01:00
2021-03-08 12:31:46 +01:00
2021-03-08 12:31:46 +01:00
2021-03-08 12:31:46 +01:00
2021-03-08 12:31:46 +01:00
2021-03-08 12:31:46 +01:00
2021-03-08 12:31:46 +01:00
2021-03-08 12:31:46 +01:00
2021-03-08 12:31:46 +01:00
2021-03-08 12:31:46 +01:00
2021-03-08 12:31:46 +01:00
2021-03-08 12:31:46 +01:00
2021-03-08 12:31:46 +01:00
2021-03-08 12:31:46 +01:00
2021-03-08 12:31:46 +01:00
2021-03-01 13:40:52 +01:00
2021-04-30 09:31:34 -07:00