[DSE-Dev] Bug#796693: selinux-basics: Has init script in runlevel S but no matching service file

[Michael Biebl]

Hi Russell,

thanks for contacting us!

Am 14.09.2015 um 14:46 schrieb Felipe Sateler:
> I could not find what the fedora people are doing, but they likely
> already faced this problem, it is probably worth checking what they
> did.

A quick grep in a fedora f22 vm shows this:

> # grep relabel -R /usr/lib/systemd/
> /usr/lib/systemd/fedora-autorelabel:# Do automatic relabelling
> /usr/lib/systemd/fedora-autorelabel:relabel_selinux() {
> /usr/lib/systemd/fedora-autorelabel:    # wrong context, so a reboot will be required after relabel
> /usr/lib/systemd/fedora-autorelabel:	echo $"*** Warning -- SELinux ${SELINUXTYPE} policy relabel is required. "
> /usr/lib/systemd/fedora-autorelabel:	echo $"*** Warning -- SELinux ${SELINUXTYPE} policy relabel is required."
> /usr/lib/systemd/fedora-autorelabel:	FORCE=`cat /.autorelabel`
> /usr/lib/systemd/fedora-autorelabel:    rm -f  /.autorelabel
> /usr/lib/systemd/fedora-autorelabel:# Check to see if a full relabel is needed
> /usr/lib/systemd/fedora-autorelabel:    relabel_selinux
> /usr/lib/systemd/system/fedora-autorelabel.service:ConditionKernelCommandLine=|autorelabel
> /usr/lib/systemd/system/fedora-autorelabel.service:ConditionPathExists=|/.autorelabel
> /usr/lib/systemd/system/fedora-autorelabel.service:ExecStart=/lib/systemd/fedora-autorelabel
> /usr/lib/systemd/system/basic.target.wants/fedora-autorelabel.service:ConditionKernelCommandLine=|autorelabel
> /usr/lib/systemd/system/basic.target.wants/fedora-autorelabel.service:ConditionPathExists=|/.autorelabel
> /usr/lib/systemd/system/basic.target.wants/fedora-autorelabel.service:ExecStart=/lib/systemd/fedora-autorelabel
> /usr/lib/systemd/system/basic.target.wants/fedora-autorelabel-mark.service:Description=Mark the need to relabel after reboot
> /usr/lib/systemd/system/basic.target.wants/fedora-autorelabel-mark.service:ConditionPathExists=!/.autorelabel
> /usr/lib/systemd/system/basic.target.wants/fedora-autorelabel-mark.service:ExecStart=-/bin/touch /.autorelabel
> /usr/lib/systemd/system/fedora-autorelabel-mark.service:Description=Mark the need to relabel after reboot
> /usr/lib/systemd/system/fedora-autorelabel-mark.service:ConditionPathExists=!/.autorelabel
> /usr/lib/systemd/system/fedora-autorelabel-mark.service:ExecStart=-/bin/touch /.autorelabel


-- 
Why is it that all of the instruments seeking intelligent life in the
universe are pointed away from Earth?

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 819 bytes
Desc: OpenPGP digital signature
URL: <http://lists.alioth.debian.org/pipermail/selinux-devel/attachments/20150914/3380d4fe/attachment.sig>