153c5c2198
Refactor the custom exec context setting code to look like setexecfilecon()
in case the real one is not available to eliminate pesky behavioral
differences between the two cases.
This fixes a concrete bug of libselinux setexecfilecon() returning with
an error when security_getenforce() returns with -1 (such as a bare
chroot with no /sys mounts etc), causing us to spit out useless error
messages in that case ever since fixing the bogus if-logic in
commit
|
||
|---|---|---|
| .. | ||
| Makefile.am | ||
| audit.c | ||
| ima.c | ||
| prioreset.c | ||
| selinux.c | ||
| syslog.c | ||
| systemd_inhibit.c | ||