libselinux: cycle though subs until there's none

should fix: $ matchpathcon /var/run/foo/bar /run/foo/bar /var/run/foo/bar system_u:object_r:etc_t:s0 /run/foo/bar system_u:object_r:var_run_t:s0 Signed-off-by: Petr Lautrbach <[email protected]>
bachradsusi · Oct 3, 2023 · 520c547 · 520c547
1 parent e609391
commit 520c547
Showing 1 changed file with 5 additions and 3 deletions.
diff --git a/libselinux/src/label_file.c b/libselinux/src/label_file.c
@@ -995,9 +995,11 @@ static struct spec **lookup_all(struct selabel_handle *rec,
 		key = clean_key;
 	}
 
-	sub = selabel_sub_key(data, key);
-	if (sub)
-		key = sub;
+	do {
+		sub = selabel_sub_key(data, key);
+		if (sub)
+			key = sub;
+	} while (sub);
 
 	file_stem = find_stem_from_file(data, key);
 	mode &= S_IFMT;