From 409c2a13fd65692c611b7bcaba12e908ef7cf1e5 Mon Sep 17 00:00:00 2001 From: Sangjung Woo Date: Wed, 14 Oct 2015 15:57:47 +0900 Subject: units: add 'smackfsroot=*' option into tmp.mount when SMACK is enabled If SMACK is enabled, 'smackfsroot=*' option should be specified in tmp.mount file since many non-root processes use /tmp for temporary usage. If not, /tmp is labeled as '_' and smack denial occurs when writing. --- Makefile.am | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) (limited to 'Makefile.am') diff --git a/Makefile.am b/Makefile.am index 8646e55450..889c03955a 100644 --- a/Makefile.am +++ b/Makefile.am @@ -616,7 +616,8 @@ EXTRA_DIST += \ units/initrd-udevadm-cleanup-db.service.in \ units/initrd-switch-root.service.in \ units/systemd-nspawn@.service.in \ - units/systemd-update-done.service.in + units/systemd-update-done.service.in \ + units/tmp.mount.m4 if HAVE_SYSV_COMPAT nodist_systemunit_DATA += \ -- cgit v1.2.3-54-g00ecf