[systemd-devel] [PATCH] selinux: Only attempt to load policy exactly once, in the real root

[Daniel J Walsh]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On 02/20/2014 02:27 PM, Eric Paris wrote:
> I like it, if it's reasonable/possible
> 
> On Thu, Feb 20, 2014 at 2:26 PM, Lennart Poettering 
> <lennart at poettering.net> wrote:
>> On Thu, 20.02.14 13:50, Eric Paris (eparis at parisplace.org) wrote:
>> 
>>> Not really.  If it doesn't exist on the final root fs and I put 
>>> enforcing=1 on the command line, I expect the box to 
>>> panic/fail/die/whatever....
>> 
>> OK, then maybe check "!in_initrd() || access("/etc/selinux/", F_OK) >=
>> 0"?
>> 
>> Lennart
>> 
>> -- Lennart Poettering, Red Hat
> _______________________________________________ Selinux mailing list 
> Selinux at tycho.nsa.gov To unsubscribe, send email to
> Selinux-leave at tycho.nsa.gov. To get help, send an email containing "help"
> to Selinux-request at tycho.nsa.gov.
You mean

"!in_initrd() || access(selinux_path(), F_OK) >= 0"?
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1
Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/

iEYEARECAAYFAlMGW1AACgkQrlYvE4MpobOeUgCg3YoRWatuabfOsAGLD4p09QVo
PYMAn3hDTBy4ePCPy/jORYlE+KGotSxE
=kkZx
-----END PGP SIGNATURE-----