diff options
| author | Sangjung Woo <sangjung.woo@samsung.com> | 2015-10-06 19:08:16 +0900 |
|---|---|---|
| committer | Sangjung Woo <sangjung.woo@samsung.com> | 2015-10-07 16:37:25 +0900 |
| commit | c02e7b1ecc7d88f6529ca3d1d231536300991a02 (patch) | |
| tree | 3ea3e71cbc54949ebec3b9f59bd0b2803ad51931 /test/exec-group.service | |
| parent | 69b8a8ebaeaae13e82d44b386555921877bc0309 (diff) | |
smack: label /etc/passwd and friends as '_' smack label when --with-smack-run-label' is enabled
systemd-sysusers.service unit creates system users and groups and it
could update /etc/passwd, /etc/group, /etc/shadow and /etc/gshadow.
Those files should have '_' smack label because of accessibility.
However, if systemd has its own smack label using '--with-smack-run-label'
configuration, systemd-sysusers process spawned by systemd(pid:1) has
its parent smack label and eventually updated files also is set as its
parent smack label.
This patch fixes that bug by labeling updated files as '_' smack label
when --with-smack-run-label' is enabled.
Diffstat (limited to 'test/exec-group.service')
0 files changed, 0 insertions, 0 deletions