platform_external_selinux/libselinux
Christian Göttsche a88d24522f libselinux: selinux_check_passwd_access_internal(): respect deny_unknown
`selinux_check_passwd_access_internal()`, and thereby
`checkPasswdAccess(3)` and `selinux_check_passwd_access(3)`, does not
respect the policy defined setting of `deny_unknown`, like
`selinux_check_access(3)` does.
This means in case the security class `passwd` is not defined, success
is returned instead of failure, i.e. permission denied.

Most policies should define the `passwd` class and the two affected
public functions are marked deprecated.

Align the behavior with `selinux_check_access(3)` and respect
the deny_unknown setting in case the security class is not defined.

Signed-off-by: Christian Göttsche <cgzones@googlemail.com>
2021-05-12 09:34:58 +02:00
..
include libselinux: accept const fromcon in get_context API 2021-01-20 16:53:34 +01:00
man selinux(8,5): Describe fcontext regular expressions 2021-02-19 15:18:05 +01:00
src libselinux: selinux_check_passwd_access_internal(): respect deny_unknown 2021-05-12 09:34:58 +02:00
utils libselinux/getconlist: report failures 2021-02-19 15:15:11 +01:00
LICENSE initial import from svn trunk revision 2950 2008-08-19 15:30:36 -04:00
Makefile libselinux: do not duplicate make target when going into subdirectory 2021-04-30 21:09:22 +02:00
VERSION Update VERSIONs to 3.2 for release. 2021-03-04 16:42:59 +01:00