From 8552b17660033812080a11533bd0edce74401039 Mon Sep 17 00:00:00 2001 From: Auke Kok Date: Wed, 9 Oct 2013 10:52:15 -0700 Subject: Smack: Test if smack is enabled before mounting Since on most systems with xattr systemd will compile with Smack support enabled, we still attempt to mount various fs's with Smack-only options. Before mounting any of these Smack-related filesystems with Smack specific mount options, check if Smack is functionally active on the running kernel. If Smack is really enabled in the kernel, all these Smack mounts are now *fatal*, as they should be. We no longer mount smackfs if systemd was compiled without Smack support. This makes it easier to make smackfs mount failures a critical error when Smack is enabled. We no longer mount these filesystems with their Smack specific options inside containers. There these filesystems will be mounted with there non-mount smack options for now. --- Makefile.am | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) (limited to 'Makefile.am') diff --git a/Makefile.am b/Makefile.am index 31dde6f03f..1458697c05 100644 --- a/Makefile.am +++ b/Makefile.am @@ -723,7 +723,9 @@ libsystemd_shared_la_SOURCES = \ src/shared/boot-timestamps.c \ src/shared/refcnt.h \ src/shared/mkdir.c \ - src/shared/mkdir.h + src/shared/mkdir.h \ + src/shared/smack-util.c \ + src/shared/smack-util.h #------------------------------------------------------------------------------- noinst_LTLIBRARIES += \ -- cgit v1.2.3-54-g00ecf