Re: [libvirt] [PATCH 8/n] selinux: avoid memory overhead of matchpathcon

14 Dec 2010


      On 11/30/2010 08:54 PM, Eric Blake wrote:
...
* src/security/security_selinux.c
(SELinuxRestoreSecurityFileLabel): Use selabel_lookup instead of
matchpathcon.
Suggested by Daniel Walsh.
---

...
#include <config.h>
 #include <selinux/selinux.h>
+#include <selinux/label.h>
 #include <selinux/context.h>
 #include <sys/types.h>
 #include <sys/stat.h>
Phooey.  This breaks on RHEL 5, where libselinux-devel-1.33.4 lacks
<selinux/label.h>.

-- 
Eric Blake   eblake@redhat.com    +1-801-349-2682
Libvirt virtualization library http://libvirt.org