jasder
/
runc
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity

Revert "DupSecOpt needs to match InitLabels" 

This reverts commit 491cadac92.

Signed-off-by: Antonio Murdaca <runcom@redhat.com>
This commit is contained in:
Antonio Murdaca 2017-01-29 19:18:17 +01:00
parent 6c22e77604
commit 384c1e595c
No known key found for this signature in database
GPG Key ID: B2BEAD150DE936B9
2 changed files with 10 additions and 14 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

18
libcontainer/label/label_selinux.go
View File

@ -33,19 +33,15 @@ func InitLabels(options []string) (string, string, error) {
pcon := selinux.NewContext(processLabel) pcon := selinux.NewContext(processLabel)
mcon := selinux.NewContext(mountLabel) mcon := selinux.NewContext(mountLabel)
for _, opt := range options { for _, opt := range options {
val := strings.SplitN(opt, "=", 2) if opt == "disable" {
if val[0] != "label" {
continue
}
if len(val) < 2 {
return "", "", fmt.Errorf("bad label option %q, valid options 'disable' or \n'user, role, level, type' followed by ':' and a value", opt)
}
if val[1] == "disable" {
return "", "", nil return "", "", nil
} }
con := strings.SplitN(val[1], ":", 2) if i := strings.Index(opt, ":"); i == -1 {
if len(con) < 2 || !validOptions[con[0]] { return "", "", fmt.Errorf("Bad label option %q, valid options 'disable' or \n'user, role, level, type' followed by ':' and a value", opt)
return "", "", fmt.Errorf("bad label option %q, valid options 'disable, user, role, level, type'", con[0]) }
con := strings.SplitN(opt, ":", 2)
if !validOptions[con[0]] {
return "", "", fmt.Errorf("Bad label option %q, valid options 'disable, user, role, level, type'", con[0])
} }
pcon[con[0]] = con[1] pcon[con[0]] = con[1]

6
libcontainer/label/label_selinux_test.go
View File

@ -18,7 +18,7 @@ func TestInit(t *testing.T) {
t.Log("InitLabels Failed") t.Log("InitLabels Failed")
t.Fatal(err) t.Fatal(err)
} }
testDisabled := []string{"label=disable"} testDisabled := []string{"disable"}
roMountLabel := GetROMountLabel() roMountLabel := GetROMountLabel()
if roMountLabel == "" { if roMountLabel == "" {
t.Errorf("GetROMountLabel Failed") t.Errorf("GetROMountLabel Failed")
@ -32,7 +32,7 @@ func TestInit(t *testing.T) {
t.Log("InitLabels Disabled Failed") t.Log("InitLabels Disabled Failed")
t.FailNow() t.FailNow()
} }
testUser := []string{"label=user:user_u", "label=role:user_r", "label=type:user_t", "label=level:s0:c1,c15"} testUser := []string{"user:user_u", "role:user_r", "type:user_t", "level:s0:c1,c15"}
plabel, mlabel, err = InitLabels(testUser) plabel, mlabel, err = InitLabels(testUser)
if err != nil { if err != nil {
t.Log("InitLabels User Failed") t.Log("InitLabels User Failed")
@ -44,7 +44,7 @@ func TestInit(t *testing.T) {
t.Fatal(err) t.Fatal(err)
} }
testBadData := []string{"label=user", "label=role:user_r", "label=type:user_t", "label=level:s0:c1,c15"} testBadData := []string{"user", "role:user_r", "type:user_t", "level:s0:c1,c15"}
if _, _, err = InitLabels(testBadData); err == nil { if _, _, err = InitLabels(testBadData); err == nil {
t.Log("InitLabels Bad Failed") t.Log("InitLabels Bad Failed")
t.Fatal(err) t.Fatal(err)