summaryrefslogtreecommitdiffstats
path: root/recipes-security
diff options
context:
space:
mode:
authorJoe MacDonald <joe@deserted.net>2013-09-27 15:09:06 -0400
committerJoe MacDonald <joe@deserted.net>2013-10-02 13:24:45 -0400
commitc7fc09794c20db9e3b32d326abb627985d2b5b65 (patch)
tree3519562a6192659686c770da2d059e5cf2d0e940 /recipes-security
parenta43e03a87c4d69c2554621394127d50f197d9eaf (diff)
downloadmeta-selinux-c7fc09794c20db9e3b32d326abb627985d2b5b65.tar.gz
udev/init: work around dev-cache restore problems
Restoring from the dev-cache with selinux enforcing causes various failures as devices are lacking, at a minimum, reasonable types and attributes. If, on the other hand, we at least create the cache with selinux and xattrs preserved and restored, we get significantly fewer errors and warnings on boot and we can successfully restore the context further down in init anyway. It still leaves some devices mislabeled, though, and still produces warnings on boot. Previous versions of the initscript removed all use of the dev-cache, if need be, we fall back to that. It is possible to get the middle-ground behaviour by defining use_udev_cache at the top of the udev initscript. Signed-off-by: Joe MacDonald <joe@deserted.net>
Diffstat (limited to 'recipes-security')
0 files changed, 0 insertions, 0 deletions