From 6fbb33f63120b798455290d96d620464e78712e7 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Christian=20G=C3=B6ttsche?= Date: Wed, 28 Jul 2021 16:59:57 +0200 Subject: selinux: improve debug log format path might be NULL when checking against the system permissions, so wrap with strna(). The command line might not be available over D-Bus and thus cl might be empty. Print "n/a" instead of the empty string. --- src/core/selinux-access.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/src/core/selinux-access.c b/src/core/selinux-access.c index f6d4e7cc50..6afc64a7b1 100644 --- a/src/core/selinux-access.c +++ b/src/core/selinux-access.c @@ -280,7 +280,7 @@ int mac_selinux_generic_access_check( log_full_errno_zerook(LOG_DEBUG, r, "SELinux access check scon=%s tcon=%s tclass=%s perm=%s state=%s function=%s path=%s cmdline=%s: %m", - scon, fcon, tclass, permission, enforce ? "enforcing" : "permissive", function, path, cl); + scon, fcon, tclass, permission, enforce ? "enforcing" : "permissive", function, strna(path), isempty(cl) ? "n/a" : cl); return enforce ? r : 0; } -- cgit v1.2.1