Age | Commit message (Collapse) | Author | |
---|---|---|---|
2011-07-29 | selinux: mount /sys, /proc, /dev before we load the SELinux policy | Lennart Poettering | |
2011-07-28 | selinux: use setcon() instead of reexec to apply selinux policy | Lennart Poettering | |
2011-07-28 | Remove a stray empty line | Michael Biebl | |
2011-07-28 | Don't show a warning message in non-enforcing mode. | Michael Biebl | |
If we fail to load the SELinux policy only log an error message in enforcing mode. | |||
2011-07-25 | selinux: check PID 1 label instead of /selinux mount point to figure out if ↵ | Lennart Poettering | |
selinux is already initialized | |||
2011-07-25 | selinux: log how much time it takes to load the SELinux policy and database | Lennart Poettering | |
2011-06-07 | selinux: selinuxfs can be mounted on /sys/fs/selinux | Michal Schmidt | |
The kernel now provides the /sys/fs/selinux mountpoint and libselinux prefers it if it's available. systemd currently tests only for /selinux and this leads to an infinite loop of policy reloads in the latest Rawhide. Fix it by checking both possible mountpoints. Also add the new path to ignore_paths[]. /selinux appears also in nspawn.c. I don't think it's necessary to change it there at this point. https://bugzilla.redhat.com/show_bug.cgi?id=711015 | |||
2011-04-04 | selinux: relabel /run the same way as /dev after loading the policy since ↵ | Lennart Poettering | |
they both come pre-filled and unlabelled | |||
2011-03-09 | dev: use /dev/.run/systemd as runtime directory, instead of /dev/.systemd | Lennart Poettering | |
2011-03-09 | selinux: bump up error level when in non-enforcing mode | Lennart Poettering | |
2010-11-10 | selinux: relabel /dev after loading policy | Lennart Poettering | |
2010-10-27 | selinux: automatically load policy if the initrd hasn't done this for us yet | Lennart Poettering | |