From b15bdda87046f5e46080fd84fda878cba2da0fc8 Mon Sep 17 00:00:00 2001 From: Lennart Poettering Date: Fri, 16 Jul 2010 19:42:27 +0200 Subject: socket: prepare for proper selinux labelling of sockets --- src/socket-util.c | 4 ++++ 1 file changed, 4 insertions(+) (limited to 'src/socket-util.c') diff --git a/src/socket-util.c b/src/socket-util.c index e6e3784bc5..442abfe1af 100644 --- a/src/socket-util.c +++ b/src/socket-util.c @@ -305,6 +305,7 @@ int socket_address_listen( bool free_bind, mode_t directory_mode, mode_t socket_mode, + /* FIXME SELINUX: pass SELinux context object here */ int *ret) { int r, fd, one; @@ -314,6 +315,9 @@ int socket_address_listen( if ((r = socket_address_verify(a)) < 0) return r; + /* FIXME SELINUX: The socket() here should be done with the + * right SELinux context set */ + if ((fd = socket(socket_address_family(a), a->type | SOCK_NONBLOCK | SOCK_CLOEXEC, 0)) < 0) return -errno; -- cgit v1.2.1