diff options
author | Treehugger Robot <treehugger-gerrit@google.com> | 2022-04-20 11:28:11 +0000 |
---|---|---|
committer | Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com> | 2022-04-20 11:28:11 +0000 |
commit | d12141441bbf020a2323c1c1fffb025a524f53f8 (patch) | |
tree | 98ce2ccd54bd6dfc12774d2b4a57e70ffb0067d4 | |
parent | a454b173344f61064eaa53e0cebb7b3fbaac8167 (diff) | |
parent | 62fd2a233dcc2a2e07e4a9a32c4692cc0b26b933 (diff) | |
download | security-d12141441bbf020a2323c1c1fffb025a524f53f8.tar.gz |
Merge "Fix lints from Rust 1.60.0" am: 90c23a8c17 am: 62fd2a233d
Original change: https://android-review.googlesource.com/c/platform/system/security/+/2068372
Change-Id: I4e1d5abaa7a401f077ae43bc2693665ee4a1b731
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
-rw-r--r-- | keystore2/src/service.rs | 25 |
1 files changed, 11 insertions, 14 deletions
diff --git a/keystore2/src/service.rs b/keystore2/src/service.rs index 79e76923..d634e0c0 100644 --- a/keystore2/src/service.rs +++ b/keystore2/src/service.rs @@ -276,22 +276,19 @@ impl KeystoreService { // If the first check fails we check if the caller has the list permission allowing to list // any namespace. In that case we also adjust the queried namespace if a specific uid was // selected. - match check_key_permission(KeyPerm::GetInfo, &k, &None) { - Err(e) => { - if let Some(selinux::Error::PermissionDenied) = - e.root_cause().downcast_ref::<selinux::Error>() - { - check_keystore_permission(KeystorePerm::List) - .context("In list_entries: While checking keystore permission.")?; - if namespace != -1 { - k.nspace = namespace; - } - } else { - return Err(e).context("In list_entries: While checking key permission.")?; + if let Err(e) = check_key_permission(KeyPerm::GetInfo, &k, &None) { + if let Some(selinux::Error::PermissionDenied) = + e.root_cause().downcast_ref::<selinux::Error>() { + + check_keystore_permission(KeystorePerm::List) + .context("In list_entries: While checking keystore permission.")?; + if namespace != -1 { + k.nspace = namespace; } + } else { + return Err(e).context("In list_entries: While checking key permission.")?; } - Ok(()) => {} - }; + } DB.with(|db| list_key_entries(&mut db.borrow_mut(), k.domain, k.nspace)) } |