From d4600691e348b7a01776921473c78dcd0c349e99 Mon Sep 17 00:00:00 2001 From: Elena Reshetova Date: Fri, 29 Nov 2013 14:04:53 +0200 Subject: [PATCH] Security plugin: removing exec label restriction Change-Id: I1da33e6e842a7f93dade78f2aebc00ed271a271c --- plugins/msmxattr.c | 2 ++ 1 file changed, 2 insertions(+) diff --git a/plugins/msmxattr.c b/plugins/msmxattr.c index 0661ae3..cdc4bd0 100644 --- a/plugins/msmxattr.c +++ b/plugins/msmxattr.c @@ -1220,6 +1220,7 @@ int msmSetFileXAttributes(manifest_x *mfx, const char* filepath, magic_t cookie) found: if (exec_label) { execLabeldefined = 1; +#if 0 if ((strcmp(exec_label, "none") == 0) || ( (mfx->request) && (mfx->request->ac_domain) && (strcmp(exec_label, mfx->request->ac_domain) == 0))) { // these labels are allowed @@ -1229,6 +1230,7 @@ int msmSetFileXAttributes(manifest_x *mfx, const char* filepath, magic_t cookie) rpmlog(RPMLOG_DEBUG, "It isn't allowed to label the file with smack64label other than requested ac domain or \"none\" value\n"); rpmlog(RPMLOG_DEBUG, "The default ac domain label will be used instead\n"); } +#endif } if ((!label) || (!exec_label)) { /* no match, use default label of AC domain */ -- 2.7.4