(2011/01/26 12:23), KaiGai Kohei wrote:
>>> Yikes. On further examination, exec_object_restorecon() is pretty
>>> bogus. Surely you need some calls to quote_literal_cstr() in there
>>> someplace.
>>
> Are you concerning about the object name being supplied to
> selabel_lookup_raw() in exec_object_restorecon()?
> I also think this quoting you suggested is reasonable.
>
How about the case when the object name only contains alphabet and
numerical characters?
Thanks,
--
KaiGai Kohei <kaigai@ak.jp.nec.com>