selinux: turn of libselinux' internal logging

1 files changed, 9 insertions, 0 deletions

diff --git a/src/core/selinux-setup.c b/src/core/selinux-setup.c
index d8643bc162..22ca820188 100644
--- a/src/core/selinux-setup.c
+++ b/src/core/selinux-setup.c
@@ -36,6 +36,10 @@
 #include "log.h"
 #include "label.h"
 
+static int null_log(int type, const char *fmt, ...) {
+        return 0;
+}
+
 int selinux_setup(bool *loaded_policy) {
 
 #ifdef HAVE_SELINUX
@@ -43,9 +47,14 @@ int selinux_setup(bool *loaded_policy) {
        usec_t before_load, after_load;
        security_context_t con;
        int r;
+       union selinux_callback cb;
 
        assert(loaded_policy);
 
+       /* Turn off all of SELinux' own logging, we want to do that */
+       cb.func_log = null_log;
+       selinux_set_callback(SELINUX_CB_LOG, cb);
+
        /* Make sure getcon() works, which needs /proc and /sys */
        mount_setup_early();