diff options
| author | Nicolas Iooss <nicolas.iooss@m4x.org> | 2016-02-02 20:07:46 +0100 |
|---|---|---|
| committer | Sven Eden <yamakuzure@gmx.net> | 2017-05-17 15:22:16 +0200 |
| commit | f5ce2eabeda330f36bb89649db00a8e030baaa93 (patch) | |
| tree | be2f655ed04b30ac4dba23f17c07056af8a02e23 /src | |
| parent | 6656a93cab40e90fbb311433b65e4b97eaf21eaa (diff) | |
logind: load SELinux labelling system
elogind-logind uses mkdir_label and label_fix functions without calling
first mac_selinux_init. This makes /run/user/$UID/ directories not
labelled correctly on an Arch Linux system using SELinux.
Fix this by calling mac_selinux_init("/run") early in elogind-logind.
This makes files created in /etc/udev/rules.d and /var/lib/elogind to be
labelled through transitions in the SELinux policy instead of using
setfscreatecon (with mac_selinux_create_file_prepare).
Diffstat (limited to 'src')
| -rw-r--r-- | src/login/logind-dbus.c | 1 |
1 files changed, 0 insertions, 1 deletions
diff --git a/src/login/logind-dbus.c b/src/login/logind-dbus.c index 5dfe5aab2..a54071800 100644 --- a/src/login/logind-dbus.c +++ b/src/login/logind-dbus.c @@ -1235,7 +1235,6 @@ static int attach_device(Manager *m, const char *seat, const char *sysfs) { return -ENOMEM; mkdir_p_label("/etc/udev/rules.d", 0755); - mac_selinux_init("/etc"); r = write_string_file_atomic_label(file, rule); if (r < 0) return r; |