tizen: units: add 'smackfsroot=*' option into tmp.mount when SMACK is enabled
authorSangjung Woo <sangjung.woo@samsung.com>
Wed, 14 Oct 2015 06:38:25 +0000 (15:38 +0900)
committerŁukasz Stelmach <l.stelmach@samsung.com>
Wed, 17 Jul 2024 14:10:51 +0000 (16:10 +0200)
commit42ad4a94a7d773e980f69b9b4cfcd09bf4308f23
treee41498fc7cc8d0249dd88d04f86356431f965461
parent4a4bd10b07987b207887270e1aa9c434ff5a49cb
tizen: units: add 'smackfsroot=*' option into tmp.mount when SMACK is enabled

If SMACK is enabled, 'smackfsroot=*' option should be specified in
tmp.mount file since many non-root processes use /tmp for temporary
usage. If not, /tmp is labeled as '_' and smack denial occurs when
writing.

Note: The original commit has been dropped upstream and replaced with
SmackFileSystemRoot  option later renamed to SmackFileSystemRootLabel.
Alas the option didn't work properly and has been dropped too.

Change-Id: I11df1ad555f376eaf0588d35e91789c9e2b07f8d
Origin: https://github.com/systemd/systemd/commit/409c2a13fd65692c6
Signed-off-by: Sangjung Woo <sangjung.woo@samsung.com>
Signed-off-by: Łukasz Stelmach <l.stelmach@samsung.com>
units/meson.build
units/tmp.mount.in [moved from units/tmp.mount with 84% similarity]