[systemd-devel] [PATCH 2/2] Run with a custom SMACK domain (label).

Zbigniew Jędrzejewski-Szmek zbyszek at in.waw.pl
Sun Oct 6 20:02:16 PDT 2013


On Wed, Oct 02, 2013 at 11:12:09AM -0700, Auke Kok wrote:
> Allows the systemd --system process to change its current
> SMACK label to a predefined custom label (usually "system")
> at boot time.
> 
> This is needed to have a few system-generated folders and
> sockets automatically be created with the right SMACK
> label. Without that, processes either cannot communicate with
> systemd or systemd fails to perform some actions.
> ---
Hi,
the patches look OK. I dont' have a system with smack support at hand,
but I tested them on Fedora, and didn't notice any adverse effects.
I you've tested them with smack, then they should be applied, imo.

Zbyszek


More information about the systemd-devel mailing list