[systemd-devel] [PATCH 2/2] Run with a custom SMACK domain (label).

Kok, Auke-jan H auke-jan.h.kok at intel.com
Mon Oct 7 10:30:06 PDT 2013


On Sun, Oct 6, 2013 at 8:02 PM, Zbigniew Jędrzejewski-Szmek
<zbyszek at in.waw.pl> wrote:
> On Wed, Oct 02, 2013 at 11:12:09AM -0700, Auke Kok wrote:
>> Allows the systemd --system process to change its current
>> SMACK label to a predefined custom label (usually "system")
>> at boot time.
>>
>> This is needed to have a few system-generated folders and
>> sockets automatically be created with the right SMACK
>> label. Without that, processes either cannot communicate with
>> systemd or systemd fails to perform some actions.
>> ---
> Hi,
> the patches look OK. I dont' have a system with smack support at hand,
> but I tested them on Fedora, and didn't notice any adverse effects.
> I you've tested them with smack, then they should be applied, imo.

Thanks, I just applied them myself - I just wanted to give folks a bit
of time to read and test - so thanks for doing so!

Auke


More information about the systemd-devel mailing list