82 lines
2.3 KiB
Diff
82 lines
2.3 KiB
Diff
|
From 4598a46c5ed12248a3a6e1dbe1b5a3dca52bacac Mon Sep 17 00:00:00 2001
|
||
|
|
From: Ondrej Mosnacek <omosnace@redhat.com>
|
||
|
|
Date: Tue, 26 Oct 2021 13:52:34 +0200
|
||
|
|
Subject: [PATCH] selinux_restorecon: protect file_spec list with a mutex
|
||
|
|
|
||
|
|
Not very useful on its own, but will allow to implement a parallel
|
||
|
|
version of selinux_restorecon() in subsequent patches.
|
||
|
|
|
||
|
|
Signed-off-by: Ondrej Mosnacek <omosnace@redhat.com>
|
||
|
|
---
|
||
|
|
libselinux/src/selinux_restorecon.c | 16 ++++++++++++++--
|
||
|
|
1 file changed, 14 insertions(+), 2 deletions(-)
|
||
|
|
|
||
|
|
diff --git a/libselinux/src/selinux_restorecon.c b/libselinux/src/selinux_restorecon.c
|
||
|
|
index e29a2c390182..43acbace309d 100644
|
||
|
|
--- a/libselinux/src/selinux_restorecon.c
|
||
|
|
+++ b/libselinux/src/selinux_restorecon.c
|
||
|
|
@@ -411,6 +411,7 @@ typedef struct file_spec {
|
||
|
|
} file_spec_t;
|
||
|
|
|
||
|
|
static file_spec_t *fl_head;
|
||
|
|
+static pthread_mutex_t fl_mutex = PTHREAD_MUTEX_INITIALIZER;
|
||
|
|
|
||
|
|
/*
|
||
|
|
* Try to add an association between an inode and a context. If there is a
|
||
|
|
@@ -424,6 +425,8 @@ static int filespec_add(ino_t ino, const char *con, const char *file,
|
||
|
|
int h, ret;
|
||
|
|
struct stat64 sb;
|
||
|
|
|
||
|
|
+ __pthread_mutex_lock(&fl_mutex);
|
||
|
|
+
|
||
|
|
if (!fl_head) {
|
||
|
|
fl_head = calloc(HASH_BUCKETS, sizeof(file_spec_t));
|
||
|
|
if (!fl_head)
|
||
|
|
@@ -444,11 +447,11 @@ static int filespec_add(ino_t ino, const char *con, const char *file,
|
||
|
|
fl->con = strdup(con);
|
||
|
|
if (!fl->con)
|
||
|
|
goto oom;
|
||
|
|
- return 1;
|
||
|
|
+ goto unlock_1;
|
||
|
|
}
|
||
|
|
|
||
|
|
if (strcmp(fl->con, con) == 0)
|
||
|
|
- return 1;
|
||
|
|
+ goto unlock_1;
|
||
|
|
|
||
|
|
selinux_log(SELINUX_ERROR,
|
||
|
|
"conflicting specifications for %s and %s, using %s.\n",
|
||
|
|
@@ -457,6 +460,9 @@ static int filespec_add(ino_t ino, const char *con, const char *file,
|
||
|
|
fl->file = strdup(file);
|
||
|
|
if (!fl->file)
|
||
|
|
goto oom;
|
||
|
|
+
|
||
|
|
+ __pthread_mutex_unlock(&fl_mutex);
|
||
|
|
+
|
||
|
|
if (flags->conflicterror) {
|
||
|
|
selinux_log(SELINUX_ERROR,
|
||
|
|
"treating conflicting specifications as an error.\n");
|
||
|
|
@@ -481,13 +487,19 @@ static int filespec_add(ino_t ino, const char *con, const char *file,
|
||
|
|
goto oom_freefl;
|
||
|
|
fl->next = prevfl->next;
|
||
|
|
prevfl->next = fl;
|
||
|
|
+
|
||
|
|
+ __pthread_mutex_unlock(&fl_mutex);
|
||
|
|
return 0;
|
||
|
|
|
||
|
|
oom_freefl:
|
||
|
|
free(fl);
|
||
|
|
oom:
|
||
|
|
+ __pthread_mutex_unlock(&fl_mutex);
|
||
|
|
selinux_log(SELINUX_ERROR, "%s: Out of memory\n", __func__);
|
||
|
|
return -1;
|
||
|
|
+unlock_1:
|
||
|
|
+ __pthread_mutex_unlock(&fl_mutex);
|
||
|
|
+ return 1;
|
||
|
|
}
|
||
|
|
|
||
|
|
/*
|
||
|
|
--
|
||
|
|
2.33.1
|
||
|
|
|