diff options
| author | Auke Kok <auke-jan.h.kok@intel.com> | 2013-09-26 14:41:09 -0700 |
|---|---|---|
| committer | Auke Kok <auke-jan.h.kok@intel.com> | 2013-10-07 10:23:20 -0700 |
| commit | d407c9402064d8b9d1b12dca6ca1ddb2688e5454 (patch) | |
| tree | 9b1a92f312926b3e63d6aa72fbb6fa18127365ef /src/core/selinux-access.h | |
| parent | 1d5989fd803d2019de0f6aaaf3cfb1cb2bbc3cdb (diff) | |
Mount /run, /dev/shm usable to tasks when using SMACK.
Once systemd itself is running in a security domain for SMACK,
it will fail to start countless tasks due to missing privileges
for mounted and created directory structures. For /run and shm
specifically, we grant all tasks access.
These 2 mounts are allowed to fail, which will happen if the
system is not running a SMACK enabled kernel or security=none is
passed to the kernel.
Diffstat (limited to 'src/core/selinux-access.h')
0 files changed, 0 insertions, 0 deletions