From 45fdf23c7b37cfc776def253c0d5bfa1b0758c24 Mon Sep 17 00:00:00 2001 From: James Carter Date: Wed, 22 Jan 2025 10:58:27 -0500 Subject: [PATCH] libselinux: Close old selabel handle when setting a new one In selinux_restorecon_set_sehandle(), close the old selabel handle (if it exists) before setting the new one. Signed-off-by: James Carter Acked-by: Petr Lautrbach --- src/selinux_restorecon.c | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/src/selinux_restorecon.c b/src/selinux_restorecon.c index bc6ed935..ab1c5216 100644 --- a/src/selinux_restorecon.c +++ b/src/selinux_restorecon.c @@ -1367,6 +1367,10 @@ void selinux_restorecon_set_sehandle(struct selabel_handle *hndl) unsigned char *fc_digest; size_t num_specfiles, fc_digest_len; + if (fc_sehandle) { + selabel_close(fc_sehandle); + } + fc_sehandle = hndl; if (!fc_sehandle) return; -- 2.33.0