commit | 6fec3a23046a3100c2ce1863afdd0191da69cdcc | [log] [tgz] |
---|---|---|
author | Nick Kralevich <nnk@google.com> | Mon Dec 09 23:30:35 2013 +0000 |
committer | Gerrit Code Review <noreply-gerritcodereview@google.com> | Mon Dec 09 23:30:36 2013 +0000 |
tree | 3cc83d1c34314e26c3b853b3ed7f095555267289 | |
parent | bdf53e2a59654d2b1e8469616f1b0175b275219d [diff] | |
parent | af06c6745bdf391c57ef29de4e6133f05c3b6187 [diff] |
Merge "Log a warning on services that lack SELinux domains."
diff --git a/init/init.c b/init/init.c index 864fc6c..365726c 100644 --- a/init/init.c +++ b/init/init.c
@@ -221,6 +221,9 @@ } rc = security_compute_create(mycon, fcon, string_to_security_class("process"), &scon); + if (rc == 0 && !strcmp(scon, mycon)) { + ERROR("Warning! Service %s needs a SELinux domain defined; please fix!\n", svc->name); + } freecon(mycon); freecon(fcon); if (rc < 0) {