Implement systemd policy. #8
Conversation
|
Please ignore the above Travis CI build error. It errors because the refpolicy-contrib refers to the upstream repo, so the submodule commit here is not available yet. |
| @@ -1 +1 @@ | |||
| Subproject commit 559464c749ca91dc6988fd87e7e1f31c90653f27 | |||
| Subproject commit 929ee738761ecc09e49e501d92107143458d66f8 | |||
There was a problem hiding this comment.
The submodule should be merged in separately i think
|
Could you also add a subsitution for debian (and other distro not using unified-/usr?) Debian/Ubuntu install most of the systemd stuffs in /lib not /usr/lib so an equivalence like should be added |
|
I guess the "SYSTEMD" setting should also be written to the build.conf in the install-headers target too Edit: and the -D part should be added to the Makefile.devel |
|
/var/run/systemd/inhibit is not labeled properly here, it's labled as init_var_run_t instead of systemd_logind_var_run_t just after boot |
Significant contributions from the Tresys CLIP team. Other changes from Laurent Bigonville.
Only for services that already have a named init script. Add rules to init_startstop_service(), with conditional arg until all of refpolicy-contrib callers are updated.
Collect all types used to label sysfs entries.
This fixes an assertion error with systemd_tmpfiles_t. It should have been a security file for a while.
2 fixes for geoclue module
Use the SYSTEMD build.conf variable to switch from the traditional
sysvinit-style init system to systemd.