Re: is_selinux_enabled() after chroot()

2018-06-19 Thread Petr Lautrbach
e selinux_mnt to check if SELinux is > > enabled. But it doesn't work correctly when you use chroot() to a directory > > without /proc > > and /sys/fs/selinux mounted as it was discovered in > > https://bugzilla.redhat.com/show_bug.cgi?id=1321375 > > > >

Re: is_selinux_enabled() after chroot()

2018-06-18 Thread Stephen Smalley
to a directory > without /proc > and /sys/fs/selinux mounted as it was discovered in > https://bugzilla.redhat.com/show_bug.cgi?id=1321375 > > In this case, is_selinux_enabled() after chroot() returns true while in a new > program run from chrooted process it returns false. It c

is_selinux_enabled() after chroot()

2018-06-18 Thread Petr Lautrbach
as it was discovered in https://bugzilla.redhat.com/show_bug.cgi?id=1321375 In this case, is_selinux_enabled() after chroot() returns true while in a new program run from chrooted process it returns false. It can be demonstrated by the steps below. The solution could be to check if selinux_mnt still exists