crtxcr/exile.h
1
0
Forka 0
Codice Problemi 14 Pull Requests 1 Rilasci Wiki Attività

check_policy_sanity(): Traverse path_policy list only if no landlock available

Sfoglia il codice sorgente
This commit is contained in:
Albert S. 2021-12-29 00:29:14 +01:00
parent 9048a3b4fe
commit 4824c6eaa9
1 ha cambiato i file con 5 aggiunte e 5 eliminazioni
Mostra statistiche Scarica il file Patch Scarica il file Diff Expand all files Collapse all files

10
exile.h
Vedi File

@ -1546,18 +1546,18 @@ static int check_policy_sanity(struct exile_policy *policy)
}
int can_use_landlock = exile_landlock_is_available();
struct exile_path_policy *path_policy = policy->path_policies;
while(path_policy)
if(!can_use_landlock)
{
if(path_policy_needs_landlock(path_policy))
struct exile_path_policy *path_policy = policy->path_policies;
while(path_policy)
{
if(!can_use_landlock)
if(path_policy_needs_landlock(path_policy))
{
EXILE_LOG_ERROR("Error: A path policy needs landlock, but landlock is not available. Fallback not possible\n");
return -1;
}
path_policy = path_policy->next;
}
path_policy = path_policy->next;
}
/* TODO: check if we have ALLOWED, but no default deny */