From 835e44edc19da3a5c6b9867186f084577cf35954 Mon Sep 17 00:00:00 2001 From: Karol Lewandowski Date: Tue, 11 Dec 2012 11:54:36 +0100 Subject: [PATCH] systemd: Add systemd unit to set default smack labels Signed-off-by: Jacek Migacz Signed-off-by: Karol Lewandowski Change-Id: Ia572357d4501b5d0f5cc003a5c0ec268a2bad89e --- packaging/libprivilege-control.spec | 7 +++++++ packaging/smack-default-labeling.service | 13 +++++++++++++ 2 files changed, 20 insertions(+) create mode 100644 packaging/smack-default-labeling.service diff --git a/packaging/libprivilege-control.spec b/packaging/libprivilege-control.spec index 2232465..5827764 100644 --- a/packaging/libprivilege-control.spec +++ b/packaging/libprivilege-control.spec @@ -8,6 +8,7 @@ Group: System/Security License: Apache 2.0 Source0: %{name}-%{version}.tar.gz Source1: %{name}-conf.manifest +Source2: smack-default-labeling.service BuildRequires: cmake BuildRequires: pkgconfig(libsmack) @@ -56,6 +57,10 @@ install -D -d %{buildroot}/etc/rc.d/rc4.d/ ln -sf ../init.d/smack_default_labeling %{buildroot}/etc/rc.d/rc3.d/S45smack_default_labeling ln -sf ../init.d/smack_default_labeling %{buildroot}/etc/rc.d/rc4.d/S45smack_default_labeling +mkdir -p %{buildroot}%{_libdir}/systemd/system/basic.target.wants +install -m 644 %{SOURCE2} %{buildroot}%{_libdir}/systemd/system/ +ln -s ../smack-default-labeling.service %{buildroot}%{_libdir}/systemd/system/basic.target.wants/ + %post if [ ! -e "/home/app" ] then @@ -91,6 +96,8 @@ ln -s %{udev_libdir}/rules.d/95-permissions-slp.rules /lib/udev/rules.d/95-permi /etc/passwd /opt/etc/smack/* %attr(755,root,root) /etc/rc.d/* +%{_libdir}/systemd/system/smack-default-labeling.service +%{_libdir}/systemd/system/basic.target.wants/smack-default-labeling.service %manifest %{_datadir}/%{name}-conf.manifest %files devel diff --git a/packaging/smack-default-labeling.service b/packaging/smack-default-labeling.service new file mode 100644 index 0000000..21b6d0a --- /dev/null +++ b/packaging/smack-default-labeling.service @@ -0,0 +1,13 @@ +[Unit] +Description=Default SMACK labeling +DefaultDependencies=no +Requires=smack.service local-fs.target +After=smack.service local-fs.target +Before=multi-user.target + +[Service] +Type=oneshot +ExecStart=/etc/rc.d/init.d/smack_default_labeling + +[Install] +WantedBy=basic.target -- 2.7.4