5 Commits

Author	SHA1	Message	Date
WaLyong Cho	66b6d9d5b5	label: rearrange mandatory access control(MAC) apis ... move label apis to selinux-util.ch or smack-util.ch appropriately.	2014-10-23 17:10:05 +02:00
Kay Sievers	d2edfae0f9	build-sys: use glibc's xattr support instead of requiring libattr	2014-05-28 17:36:40 +08:00
Kay Sievers	9a4e038c15	smack: minimize ifdef use, and move all labeling to smack-util.c	2013-10-11 10:16:41 +02:00
Lennart Poettering	d682b3a7e7	security: rework selinux, smack, ima, apparmor detection logic ... Always cache the results, and bypass low-level security calls when the respective subsystem is not enabled.	2013-10-10 16:35:44 +02:00
Auke Kok	8552b17660	Smack: Test if smack is enabled before mounting ... Since on most systems with xattr systemd will compile with Smack support enabled, we still attempt to mount various fs's with Smack-only options. Before mounting any of these Smack-related filesystems with Smack specific mount options, check if Smack is functionally active on the running kernel. If Smack is really enabled in the kernel, all these Smack mounts are now *fatal*, as they should be. We no longer mount smackfs if systemd was compiled without Smack support. This makes it easier to make smackfs mount failures a critical error when Smack is enabled. We no longer mount these filesystems with their Smack specific options inside containers. There these filesystems will be mounted with there non-mount smack options for now.	2013-10-09 15:06:17 -07:00