From 013c01bd491b535e1705dbb3dbd8424cffc66b7a Mon Sep 17 00:00:00 2001 From: Michal Zidek Date: Thu, 6 Nov 2014 16:35:11 +0100 Subject: selinux_child: Do not ignore return values. MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Reviewed-by: Lukáš Slebodník --- src/providers/ipa/selinux_child.c | 8 ++++++++ 1 file changed, 8 insertions(+) (limited to 'src') diff --git a/src/providers/ipa/selinux_child.c b/src/providers/ipa/selinux_child.c index a624cfd3..a38ffcb2 100644 --- a/src/providers/ipa/selinux_child.c +++ b/src/providers/ipa/selinux_child.c @@ -241,8 +241,16 @@ int main(int argc, const char *argv[]) DEBUG(SSSDBG_TRACE_FUNC, "performing selinux operations\n"); ret = set_seuser(ibuf->username, ibuf->seuser, ibuf->mls_range); + if (ret != EOK) { + DEBUG(SSSDBG_CRIT_FAILURE, "Cannot set SELinux login context.\n"); + goto fail; + } ret = prepare_response(main_ctx, ret, &resp); + if (ret != EOK) { + DEBUG(SSSDBG_CRIT_FAILURE, "Failed to prepare response buffer.\n"); + goto fail; + } errno = 0; -- cgit