[systemd-devel] [PATCH] selinux: Only attempt to load policy exactly once, in the real root

Lennart Poettering lennart at poettering.net
Thu Feb 20 18:33:15 PST 2014


On Thu, 20.02.14 23:44, Colin Walters (walters at verbum.org) wrote:

> On Thu, Feb 20, 2014 at 4:21 PM, Colin Walters <walters at verbum.org>
> wrote:
> >
> >I'm testing this suggested patch now.
> >
> I tweaked the suggestion a bit because the selinux_path() API call
> made the most sense inside selinux-setup.c.  Attached patch works
> for me.

It's actually even easier than this patch, as in_initrd() is a normal
exported function, we can call it directly from selinux_setup(). I have
made that change to your patch and commited it. Please test!

Thanks!

Lennart

-- 
Lennart Poettering, Red Hat


More information about the systemd-devel mailing list