[Rpm-maint] First attempt for the patch on extending the plugin interface for rpm
Elena Reshetova
elena.reshetova at gmail.com
Wed Oct 17 08:08:48 UTC 2012
>On Tue, Oct 16, 2012 at 7:51 PM, Stephen Smalley <sds at tycho.nsa.gov> wrote:
>>
>> @ Stephen, do you know how mandatory for SELinux is to have the whole argv
>> struct? Is it just because of rpm_execcon() API or?
>
> It is because presently rpm_execcon() performs the exec call. If the
> exec call is handled by the caller, then we only need the executable
> path. Likewise with envp; we do not need it if the caller performs the
> exec. We would just move the remaining logic to set up the exec context
> from libselinux rpm_execcon() into the rpm selinux plugin code; as rpm
> is the only user of it, there is no real reason for it to live in
> libselinux vs being part of an rpm plugin.
Good, thank you for clarifying this! This is what I was hoping can be
the case. I will change the hook to have only path passed for now.
Best Regards,
Elena.
More information about the Rpm-maint
mailing list