Hi Russell, thanks for contacting us!
Am 14.09.2015 um 14:46 schrieb Felipe Sateler:
> I could not find what the fedora people are doing, but they likely
> already faced this problem, it is probably worth checking what they
> did.
A quick grep in a fedora f22 vm shows this:
> # grep relabel -R /usr/lib/systemd/
> /usr/lib/systemd/fedora-autorelabel:# Do automatic relabelling
> /usr/lib/systemd/fedora-autorelabel:relabel_selinux() {
> /usr/lib/systemd/fedora-autorelabel: # wrong context, so a reboot will be
> required after relabel
> /usr/lib/systemd/fedora-autorelabel: echo $"*** Warning -- SELinux
> ${SELINUXTYPE} policy relabel is required. "
> /usr/lib/systemd/fedora-autorelabel: echo $"*** Warning -- SELinux
> ${SELINUXTYPE} policy relabel is required."
> /usr/lib/systemd/fedora-autorelabel: FORCE=`cat /.autorelabel`
> /usr/lib/systemd/fedora-autorelabel: rm -f /.autorelabel
> /usr/lib/systemd/fedora-autorelabel:# Check to see if a full relabel is needed
> /usr/lib/systemd/fedora-autorelabel: relabel_selinux
> /usr/lib/systemd/system/fedora-autorelabel.service:ConditionKernelCommandLine=|autorelabel
> /usr/lib/systemd/system/fedora-autorelabel.service:ConditionPathExists=|/.autorelabel
> /usr/lib/systemd/system/fedora-autorelabel.service:ExecStart=/lib/systemd/fedora-autorelabel
> /usr/lib/systemd/system/basic.target.wants/fedora-autorelabel.service:ConditionKernelCommandLine=|autorelabel
> /usr/lib/systemd/system/basic.target.wants/fedora-autorelabel.service:ConditionPathExists=|/.autorelabel
> /usr/lib/systemd/system/basic.target.wants/fedora-autorelabel.service:ExecStart=/lib/systemd/fedora-autorelabel
> /usr/lib/systemd/system/basic.target.wants/fedora-autorelabel-mark.service:Description=Mark
> the need to relabel after reboot
> /usr/lib/systemd/system/basic.target.wants/fedora-autorelabel-mark.service:ConditionPathExists=!/.autorelabel
> /usr/lib/systemd/system/basic.target.wants/fedora-autorelabel-mark.service:ExecStart=-/bin/touch
> /.autorelabel
> /usr/lib/systemd/system/fedora-autorelabel-mark.service:Description=Mark the
> need to relabel after reboot
> /usr/lib/systemd/system/fedora-autorelabel-mark.service:ConditionPathExists=!/.autorelabel
> /usr/lib/systemd/system/fedora-autorelabel-mark.service:ExecStart=-/bin/touch
> /.autorelabel
--
Why is it that all of the instruments seeking intelligent life in the
universe are pointed away from Earth?
signature.asc
Description: OpenPGP digital signature
_______________________________________________ SELinux-devel mailing list [email protected] http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/selinux-devel
