X-Git-Url: http://www.chiark.greenend.org.uk/ucgi/~ianmdlvl/git?p=elogind.git;a=blobdiff_plain;f=libudev%2Flibudev-selinux-private.c;h=cb06a280f7924000abeaba50b47f0b963eff0062;hp=84f8b6a63fc0cbea6a6c171ddfa0ccb095c39f38;hb=4fd394c34b1950ba897ef9ce92b14d2fe2a8dba8;hpb=44b49d3736bfdc94da31b5670a2c5a3477a201eb

diff --git a/libudev/libudev-selinux-private.c b/libudev/libudev-selinux-private.c
index 84f8b6a63..cb06a280f 100644
--- a/libudev/libudev-selinux-private.c
+++ b/libudev/libudev-selinux-private.c
@@ -53,7 +53,7 @@ void udev_selinux_lsetfilecon(struct udev *udev, const char *file, unsigned int
 	if (matchpathcon(file, mode, &scontext) < 0) {
 		err(udev, "matchpathcon(%s) failed\n", file);
 		return;
-	} 
+	}
 	if (lsetfilecon(file, scontext) < 0)
 		err(udev, "setfilecon %s failed: %m\n", file);
 	freecon(scontext);
@@ -65,6 +65,7 @@ void udev_selinux_setfscreatecon(struct udev *udev, const char *file, unsigned i
 
 	if (!selinux_enabled)
 		return;
+
 	if (matchpathcon(file, mode, &scontext) < 0) {
 		err(udev, "matchpathcon(%s) failed\n", file);
 		return;
@@ -81,3 +82,28 @@ void udev_selinux_resetfscreatecon(struct udev *udev)
 	if (setfscreatecon(selinux_prev_scontext) < 0)
 		err(udev, "setfscreatecon failed: %m\n");
 }
+
+void udev_selinux_setfscreateconat(struct udev *udev, int dfd, const char *file, unsigned int mode)
+{
+	char filename[UTIL_PATH_SIZE];
+
+	if (!selinux_enabled)
+		return;
+
+	/* resolve relative filename */
+	if (file[0] != '/') {
+		char procfd[UTIL_PATH_SIZE];
+		char target[UTIL_PATH_SIZE];
+		ssize_t len;
+
+		snprintf(procfd, sizeof(procfd), "/proc/%u/fd/%u", getpid(), dfd);
+		len = readlink(procfd, target, sizeof(target));
+		if (len <= 0 || len == sizeof(target))
+			return;
+		target[len] = '\0';
+
+		util_strscpyl(filename, sizeof(filename), target, "/", file, NULL);
+		file = filename;
+	}
+	udev_selinux_setfscreatecon(udev, file, mode);
+}