diff options
| author | Aditya R <arajan@redhat.com> | 2022-09-29 18:20:00 +0530 |
|---|---|---|
| committer | Aditya R <arajan@redhat.com> | 2022-09-29 18:20:03 +0530 |
| commit | f00ceaabd497e87415f6926de50478260cd7e844 (patch) | |
| tree | e7eda66523349d0fe7184da5e1bb2fbc736d9ff6 /vendor/github.com/opencontainers/selinux/go-selinux/label/label_linux.go | |
| parent | b7eee0b2ce1eb19804ebed6184d0ad2a4bd91fb9 (diff) | |
| download | podman-f00ceaabd497e87415f6926de50478260cd7e844.tar.gz podman-f00ceaabd497e87415f6926de50478260cd7e844.tar.bz2 podman-f00ceaabd497e87415f6926de50478260cd7e844.zip | |
vendor: bump c/common to v0.49.2-0.20220929111928-2d1b45ae2423
[NO NEW TESTS NEEDED]
[NO TESTS NEEDED]
Signed-off-by: Aditya R <arajan@redhat.com>
Diffstat (limited to 'vendor/github.com/opencontainers/selinux/go-selinux/label/label_linux.go')
| -rw-r--r-- | vendor/github.com/opencontainers/selinux/go-selinux/label/label_linux.go | 46 |
1 files changed, 0 insertions, 46 deletions
diff --git a/vendor/github.com/opencontainers/selinux/go-selinux/label/label_linux.go b/vendor/github.com/opencontainers/selinux/go-selinux/label/label_linux.go index 12de0ae5d..f61a56015 100644 --- a/vendor/github.com/opencontainers/selinux/go-selinux/label/label_linux.go +++ b/vendor/github.com/opencontainers/selinux/go-selinux/label/label_linux.go @@ -3,8 +3,6 @@ package label import ( "errors" "fmt" - "os" - "os/user" "strings" "github.com/opencontainers/selinux/go-selinux" @@ -113,50 +111,6 @@ func Relabel(path string, fileLabel string, shared bool) error { return nil } - exclude_paths := map[string]bool{ - "/": true, - "/bin": true, - "/boot": true, - "/dev": true, - "/etc": true, - "/etc/passwd": true, - "/etc/pki": true, - "/etc/shadow": true, - "/home": true, - "/lib": true, - "/lib64": true, - "/media": true, - "/opt": true, - "/proc": true, - "/root": true, - "/run": true, - "/sbin": true, - "/srv": true, - "/sys": true, - "/tmp": true, - "/usr": true, - "/var": true, - "/var/lib": true, - "/var/log": true, - } - - if home := os.Getenv("HOME"); home != "" { - exclude_paths[home] = true - } - - if sudoUser := os.Getenv("SUDO_USER"); sudoUser != "" { - if usr, err := user.Lookup(sudoUser); err == nil { - exclude_paths[usr.HomeDir] = true - } - } - - if path != "/" { - path = strings.TrimSuffix(path, "/") - } - if exclude_paths[path] { - return fmt.Errorf("SELinux relabeling of %s is not allowed", path) - } - if shared { c, err := selinux.NewContext(fileLabel) if err != nil { |
