diff options
author | David Herrmann <dh.herrmann@gmail.com> | 2015-08-27 16:23:47 +0200 |
---|---|---|
committer | David Herrmann <dh.herrmann@gmail.com> | 2015-08-27 16:29:01 +0200 |
commit | 8faae625dc9b6322db452937f54176e56e65265a (patch) | |
tree | 6d8bb83e521173ce69453e465858415b253a038e /rules | |
parent | 19bee5c3674cda184443509b49b9415f599349ab (diff) |
selinux: drop mac_selinux_unit_access_check_strv()
It is not acceptable to load unit files during enable/disable operations
just to figure out the selinux labels. systemd implements lazy loading
for units, so the selinux hooks need to follow it.
This drops the mac_selinux_unit_access_check_strv() helper which
implements a non-acceptable policy check. If anyone cares for that
functionality, you really should pass a callback+userdata to the helpers
in src/shared/install.c which does policy checks on each touched file.
See #1050 on github for more.
Diffstat (limited to 'rules')
0 files changed, 0 insertions, 0 deletions