d738b9
From b22fe94f6965ebdd2e0cbf2ac002e0e5f9c11789 Mon Sep 17 00:00:00 2001
d738b9
From: Robbie Harwood <rharwood@redhat.com>
d738b9
Date: Fri, 22 Apr 2016 10:03:22 -0400
d738b9
Subject: [PATCH] krb5-1.11-run_user_0.patch
d738b9
d738b9
---
d738b9
 src/lib/krb5/ccache/cc_dir.c | 14 ++++++++++++++
d738b9
 1 file changed, 14 insertions(+)
d738b9
d738b9
diff --git a/src/lib/krb5/ccache/cc_dir.c b/src/lib/krb5/ccache/cc_dir.c
d738b9
index 73f0fe62d..4850c0d07 100644
d738b9
--- a/src/lib/krb5/ccache/cc_dir.c
d738b9
+++ b/src/lib/krb5/ccache/cc_dir.c
d738b9
@@ -61,6 +61,8 @@
d738b9
 
d738b9
 #include <dirent.h>
d738b9
 
d738b9
+#define ROOT_SPECIAL_DCC_PARENT "/run/user/0"
d738b9
+
d738b9
 extern const krb5_cc_ops krb5_dcc_ops;
d738b9
 extern const krb5_cc_ops krb5_fcc_ops;
d738b9
 
d738b9
@@ -237,6 +239,18 @@ verify_dir(krb5_context context, const char *dirname)
d738b9
 
d738b9
     if (stat(dirname, &st) < 0) {
d738b9
         if (errno == ENOENT) {
d738b9
+            if (strncmp(dirname, ROOT_SPECIAL_DCC_PARENT "/",
d738b9
+                        sizeof(ROOT_SPECIAL_DCC_PARENT)) == 0 &&
d738b9
+                stat(ROOT_SPECIAL_DCC_PARENT, &st) < 0 &&
d738b9
+                errno == ENOENT) {
d738b9
+#ifdef USE_SELINUX
d738b9
+                selabel = krb5int_push_fscreatecon_for(ROOT_SPECIAL_DCC_PARENT);
d738b9
+#endif
d738b9
+                status = mkdir(ROOT_SPECIAL_DCC_PARENT, S_IRWXU);
d738b9
+#ifdef USE_SELINUX
d738b9
+                krb5int_pop_fscreatecon(selabel);
d738b9
+#endif
d738b9
+            }
d738b9
 #ifdef USE_SELINUX
d738b9
             selabel = krb5int_push_fscreatecon_for(dirname);
d738b9
 #endif