diff options
| author | Nicolas Iooss <nicolas.iooss@m4x.org> | 2016-02-02 20:07:46 +0100 |
|---|---|---|
| committer | Nicolas Iooss <nicolas.iooss@m4x.org> | 2016-02-02 20:07:46 +0100 |
| commit | 4b51966cf6c06250036e428608da92f8640beb96 (patch) | |
| tree | fdf92c16895bf593facc71f8d9115483a3e6e639 /src/login/logind-dbus.c | |
| parent | b72190e90f0846956e609075fb9113dba9bc8f0f (diff) | |
logind: load SELinux labelling system
systemd-logind uses mkdir_label and label_fix functions without calling
first mac_selinux_init. This makes /run/user/$UID/ directories not
labelled correctly on an Arch Linux system using SELinux.
Fix this by calling mac_selinux_init("/run") early in systemd-logind.
This makes files created in /etc/udev/rules.d and /var/lib/systemd to be
labelled through transitions in the SELinux policy instead of using
setfscreatecon (with mac_selinux_create_file_prepare).
Diffstat (limited to 'src/login/logind-dbus.c')
| -rw-r--r-- | src/login/logind-dbus.c | 1 |
1 files changed, 0 insertions, 1 deletions
diff --git a/src/login/logind-dbus.c b/src/login/logind-dbus.c index 9eda4638e5..ddfeaa1d87 100644 --- a/src/login/logind-dbus.c +++ b/src/login/logind-dbus.c @@ -1228,7 +1228,6 @@ static int attach_device(Manager *m, const char *seat, const char *sysfs) { return -ENOMEM; mkdir_p_label("/etc/udev/rules.d", 0755); - mac_selinux_init("/etc"); r = write_string_file_atomic_label(file, rule); if (r < 0) return r; |