From 5d548fec5a6a1c7016ce7de108164f100583ba49 Mon Sep 17 00:00:00 2001
From: Christian Göttsche <cgzones@googlemail.com>
Date: Fri, 24 May 2024 17:38:31 +0200
Subject: pam_namespace: log getfscreatecon(3) failure
Log in case the current fscreate context could not be retrieved.
---
modules/pam_namespace/pam_namespace.c | 4 +++-
1 file changed, 3 insertions(+), 1 deletion(-)
(limited to 'modules/pam_namespace')
diff --git a/modules/pam_namespace/pam_namespace.c b/modules/pam_namespace/pam_namespace.c
index 2dab49ef..ba7910f6 100644
--- a/modules/pam_namespace/pam_namespace.c
+++ b/modules/pam_namespace/pam_namespace.c
@@ -1433,7 +1433,9 @@ static int create_polydir(struct polydir_s *polyptr,
#ifdef WITH_SELINUX
if (idata->flags & PAMNS_SELINUX_ENABLED) {
- getfscreatecon_raw(&oldcon_raw);
+ if (getfscreatecon_raw(&oldcon_raw) != 0)
+ pam_syslog(idata->pamh, LOG_NOTICE,
+ "Error retrieving fs create context: %m");
label_handle = selabel_open(SELABEL_CTX_FILE, NULL, 0);
if (!label_handle) {
--
cgit v1.2.3