diff options
author | Joe MacDonald <joe@deserted.net> | 2013-09-27 15:09:06 -0400 |
---|---|---|
committer | Joe MacDonald <joe@deserted.net> | 2013-10-02 13:24:45 -0400 |
commit | c7fc09794c20db9e3b32d326abb627985d2b5b65 (patch) | |
tree | 3519562a6192659686c770da2d059e5cf2d0e940 /recipes-security | |
parent | a43e03a87c4d69c2554621394127d50f197d9eaf (diff) | |
download | meta-selinux-c7fc09794c20db9e3b32d326abb627985d2b5b65.tar.gz |
udev/init: work around dev-cache restore problems
Restoring from the dev-cache with selinux enforcing causes various
failures as devices are lacking, at a minimum, reasonable types and
attributes. If, on the other hand, we at least create the cache with
selinux and xattrs preserved and restored, we get significantly fewer
errors and warnings on boot and we can successfully restore the context
further down in init anyway. It still leaves some devices mislabeled,
though, and still produces warnings on boot.
Previous versions of the initscript removed all use of the dev-cache,
if need be, we fall back to that. It is possible to get the middle-ground
behaviour by defining use_udev_cache at the top of the udev initscript.
Signed-off-by: Joe MacDonald <joe@deserted.net>
Diffstat (limited to 'recipes-security')
0 files changed, 0 insertions, 0 deletions