summaryrefslogtreecommitdiff
path: root/src/selinux-setup.c
AgeCommit message (Collapse)Author
2011-07-29selinux: mount /sys, /proc, /dev before we load the SELinux policyLennart Poettering
2011-07-28selinux: use setcon() instead of reexec to apply selinux policyLennart Poettering
2011-07-28Remove a stray empty lineMichael Biebl
2011-07-28Don't show a warning message in non-enforcing mode.Michael Biebl
If we fail to load the SELinux policy only log an error message in enforcing mode.
2011-07-25selinux: check PID 1 label instead of /selinux mount point to figure out if ↵Lennart Poettering
selinux is already initialized
2011-07-25selinux: log how much time it takes to load the SELinux policy and databaseLennart Poettering
2011-06-07selinux: selinuxfs can be mounted on /sys/fs/selinuxMichal Schmidt
The kernel now provides the /sys/fs/selinux mountpoint and libselinux prefers it if it's available. systemd currently tests only for /selinux and this leads to an infinite loop of policy reloads in the latest Rawhide. Fix it by checking both possible mountpoints. Also add the new path to ignore_paths[]. /selinux appears also in nspawn.c. I don't think it's necessary to change it there at this point. https://bugzilla.redhat.com/show_bug.cgi?id=711015
2011-04-04selinux: relabel /run the same way as /dev after loading the policy since ↵Lennart Poettering
they both come pre-filled and unlabelled
2011-03-09dev: use /dev/.run/systemd as runtime directory, instead of /dev/.systemdLennart Poettering
2011-03-09selinux: bump up error level when in non-enforcing modeLennart Poettering
2010-11-10selinux: relabel /dev after loading policyLennart Poettering
2010-10-27selinux: automatically load policy if the initrd hasn't done this for us yetLennart Poettering