From c48dc21300a0ddee4f827e540fe76956a2d7722f Mon Sep 17 00:00:00 2001
From: DJ Delorie <dj@redhat.com>
Date: Thu, 6 Apr 2023 23:53:24 -0400
Subject: [PATCH] Allow user to override selinux check

---
 .libffi.metadata             |  1 +
 libffi-3.4.2-rh2152228.patch | 13 +++++++++++++
 libffi.spec                  |  8 +++++++-
 3 files changed, 21 insertions(+), 1 deletion(-)
 create mode 100644 .libffi.metadata
 create mode 100644 libffi-3.4.2-rh2152228.patch

diff --git a/.libffi.metadata b/.libffi.metadata
new file mode 100644
index 0000000..c8460e1
--- /dev/null
+++ b/.libffi.metadata
@@ -0,0 +1 @@
+460882cfdb52a2bd13fc08edc540b242ae421033 libffi-3.4.2.tar.gz
diff --git a/libffi-3.4.2-rh2152228.patch b/libffi-3.4.2-rh2152228.patch
new file mode 100644
index 0000000..83c9ef9
--- /dev/null
+++ b/libffi-3.4.2-rh2152228.patch
@@ -0,0 +1,13 @@
+diff -rup a/src/closures.c b/src/closures.c
+--- a/src/closures.c	2021-06-27 14:03:12.000000000 -0400
++++ b/src/closures.c	2023-04-06 23:37:18.742954529 -0400
+@@ -432,6 +432,9 @@ selinux_enabled_check (void)
+   char *buf = NULL;
+   size_t len = 0;
+ 
++  if (access ("/etc/sysconfig/libffi-force-shared-memory-check-first", F_OK) >= 0)
++    return 0;
++
+   if (statfs ("/selinux", &sfs) >= 0
+       && (unsigned int) sfs.f_type == 0xf97cff8cU)
+     return 1;
diff --git a/libffi.spec b/libffi.spec
index e5d7d24..302c80b 100644
--- a/libffi.spec
+++ b/libffi.spec
@@ -4,7 +4,7 @@
 
 Name:		libffi
 Version:	3.4.2
-Release:	7%{?dist}
+Release:	8%{?dist}
 Summary:	A portable foreign function interface library
 License:	MIT
 URL:		http://sourceware.org/libffi
@@ -12,6 +12,7 @@ URL:		http://sourceware.org/libffi
 Source0:	https://github.com/libffi/libffi/releases/download/v3.4.2/libffi-3.4.2.tar.gz
 Source1:	ffi-multilib.h
 Source2:	ffitarget-multilib.h
+Patch1:		libffi-3.4.2-rh2152228.patch
 
 BuildRequires: make
 BuildRequires: gcc
@@ -58,6 +59,7 @@ developing applications that use %{name}.
 
 %prep
 %setup -q
+%patch1 -p1
 
 %build
 # For now we disable the static templates to avoid ghc and
@@ -113,6 +115,10 @@ install -m644 %{SOURCE2} $RPM_BUILD_ROOT%{_includedir}/ffitarget.h
 %{_infodir}/libffi.info.*
 
 %changelog
+* Fri Apr 07 2023 DJ Delorie <dj@redhat.com> - 3.4.2-8
+- Use /etc/sysconfig/libffi-force-shared-memory-check-first to
+  override selinux permissions check for shared memory access (#2152228)
+
 * Thu Aug 26 2021 Carlos O'Donell <codonell@redhat.com> - 3.4.2-7
 - Remove compat-libffi3.1 subpackage to complete SONAME transition.
   Related: rhbz#1891914