diff options
author | CoprDistGit <infra@openeuler.org> | 2024-04-06 13:39:16 +0000 |
---|---|---|
committer | CoprDistGit <infra@openeuler.org> | 2024-04-06 13:39:16 +0000 |
commit | 0b910c31274a87f065bcc5b9224a5dc5944772b3 (patch) | |
tree | 70eb739e783a13a4319050ad5de24ecd44a194a8 /backport-httpd-2.4.25-selinux.patch | |
parent | 172d6530f37fd0f0b9026591dab42075e1081929 (diff) |
automatic import of httpd
Diffstat (limited to 'backport-httpd-2.4.25-selinux.patch')
-rw-r--r-- | backport-httpd-2.4.25-selinux.patch | 63 |
1 files changed, 0 insertions, 63 deletions
diff --git a/backport-httpd-2.4.25-selinux.patch b/backport-httpd-2.4.25-selinux.patch deleted file mode 100644 index 0db1e45..0000000 --- a/backport-httpd-2.4.25-selinux.patch +++ /dev/null @@ -1,63 +0,0 @@ -diff --git a/configure.in b/configure.in -index c5896c1..96cd4a6 100644 ---- a/configure.in -+++ b/configure.in -@@ -508,6 +508,11 @@ getloadavg - dnl confirm that a void pointer is large enough to store a long integer - APACHE_CHECK_VOID_PTR_LEN - -+AC_CHECK_LIB(selinux, is_selinux_enabled, [ -+ AC_DEFINE(HAVE_SELINUX, 1, [Defined if SELinux is supported]) -+ APR_ADDTO(HTTPD_LIBS, [-lselinux]) -+]) -+ - AC_CACHE_CHECK([for gettid()], ac_cv_gettid, - [AC_TRY_RUN(#define _GNU_SOURCE - #include <unistd.h> -diff --git a/server/core.c b/server/core.c -index 4da7209..515047b 100644 ---- a/server/core.c -+++ b/server/core.c -@@ -65,6 +65,10 @@ - #include <unistd.h> - #endif - -+#ifdef HAVE_SELINUX -+#include <selinux/selinux.h> -+#endif -+ - /* LimitRequestBody handling */ - #define AP_LIMIT_REQ_BODY_UNSET ((apr_off_t) -1) - #define AP_DEFAULT_LIMIT_REQ_BODY ((apr_off_t) 1<<30) /* 1GB */ -@@ -5126,6 +5130,28 @@ static int core_post_config(apr_pool_t *pconf, apr_pool_t *plog, apr_pool_t *pte - } - #endif - -+#ifdef HAVE_SELINUX -+ { -+ static int already_warned = 0; -+ int is_enabled = is_selinux_enabled() > 0; -+ -+ if (is_enabled && !already_warned) { -+ security_context_t con; -+ -+ if (getcon(&con) == 0) { -+ -+ ap_log_error(APLOG_MARK, APLOG_NOTICE, 0, NULL, -+ "SELinux policy enabled; " -+ "httpd running as context %s", con); -+ -+ already_warned = 1; -+ -+ freecon(con); -+ } -+ } -+ } -+#endif -+ - return OK; - } - --- -2.27.0 - |