[systemd-devel] [PATCH 0/4] add ConditionSELinux

[Michal Schmidt]

On Sun, 3 Apr 2011 16:38:35 +0200 Kay Sievers wrote:
> Wouldn't it be nicer to have ConditionSecurity=SELinux, like we have
> ConditionVirtualization=kvm? You never know what people invent next
> year. :)

OK, why not.
I guess just having ConditionSecurity=SELinux and
ConditionSecurity=!SELinux would be enough for my current needs.
So I won't bother distinguishing between enforcing and permissive.
It can be extended later to parse ConditionSecurity=SELinux:enforcing
and similar if anyone needs that.

> > ConditionPathExists=!/.autorelabel
> 
> This flag file is supposed to be found at the next bootup, right?

Correct.

Michal