From: Michael Scherer <misc@zarb.org>
Date: Sat, 11 Oct 2014 08:13:43 +0000 (-0400)
Subject: Report aa_change_onexec error code
X-Git-Tag: v217~243
X-Git-Url: http://www.chiark.greenend.org.uk/ucgi/~ianmdlvl/git?p=elogind.git;a=commitdiff_plain;h=5482192e5774f52f2af0665a3b58539295e9c0a4;ds=inline

Report aa_change_onexec error code

Since aa_change_onexec return the error code in errno, and return
-1, the current code do not give any useful information when
something fail. This make apparmor easier to debug, as seen on
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=760526
---

diff --git a/src/core/execute.c b/src/core/execute.c
index 8b9bb2713..b165b33af 100644
--- a/src/core/execute.c
+++ b/src/core/execute.c
@@ -1698,7 +1698,7 @@ static int exec_child(ExecCommand *command,
                         err = aa_change_onexec(context->apparmor_profile);
                         if (err < 0 && !context->apparmor_profile_ignore) {
                                 *error = EXIT_APPARMOR_PROFILE;
-                                return err;
+                                return -errno;
                         }
                 }
 #endif