shaba/systemd
1
0
Fork 0
mirror of https://github.com/systemd/systemd.git synced 2025-02-28 05:57:33 +03:00
Code

selinux: fix loading policy at early boot

Browse Source 
First, check for the cached enabled/disabled, as that's what all the
label functions used to do. Then, if initialization is not done yet,
do not cause the label functions to bail out, as it's expected to
happen at early boot.

Among other things, fixes:

systemd[1]: Failed to compute init label, ignoring.

Follow-up for: 0617da2edb91669a
This commit is contained in:
Luca Boccassi 2023-11-13 19:26:33 +00:00 committed by Luca Boccassi
parent 888dccfde0
commit 4ce6e7d158
1 changed files with 6 additions and 5 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

11
src/shared/selinux-util.c
View File

@ -158,16 +158,17 @@ static int selinux_init(bool force) {
};
int r;
if (!mac_selinux_use())
return 0;
if (initialized == INITIALIZED)
return 1;
/* Internal call from this module? Unless we were explicitly configured to allow lazy initialization
* bail out immediately. */
* bail out immediately. Pretend all is good, we do not want callers to abort here, for example at
* early boot when the policy is being initialised. */
if (!force && initialized != LAZY_INITIALIZED)
return 0;
if (!mac_selinux_use())
return 0;
return 1;
r = selinux_status_open(/* netlink fallback */ 1);
if (r < 0) {