(2011/01/24 12:49), Robert Haas wrote:
> On Sun, Jan 23, 2011 at 9:56 PM, Robert Haas<robertmhaas@gmail.com> wrote:
>> On Sun, Jan 23, 2011 at 8:53 PM, Robert Haas<robertmhaas@gmail.com> wrote:
>>> 2011/1/21 KaiGai Kohei<kaigai@ak.jp.nec.com>:
>>>> The attached patch is a revised version.
>>>
>>> I've committed this. Cleanup coming...
>>
>> Yikes. On further examination, exec_object_restorecon() is pretty
>> bogus. Surely you need some calls to quote_literal_cstr() in there
>> someplace.
>
Are you concerning about the object name being supplied to
selabel_lookup_raw() in exec_object_restorecon()?
I also think this quoting you suggested is reasonable.
>> And how about using getObjectDescriptionOids() for the
>> error message, instead of the entirely bogus construction that's there
>> now?
>
It seems to me a good idea. I'll try to revise corresponding code.
> Also, shouldn't a bunch of these messages end in ": %m"?
>
When these messages are because of unexpected operating system errors,
such as fails in communication with selinux, the "%m" will give us good
suggestions.
I'll submit these fixes within a few days, please wait for a while.
Thanks,
--
KaiGai Kohei <kaigai@ak.jp.nec.com>
