2022-05-17 10:24:45 +00:00
|
|
|
#!/bin/sh
|
|
|
|
|
|
|
|
|
|
# This systemd.generator(7) detects if SELinux is running and if the
|
|
|
|
|
# user requested an autorelabel, and if so sets the default target to
|
|
|
|
|
# selinux-autorelabel.target, which will cause the filesystem to be
|
|
|
|
|
# relabelled and then the system will reboot again and boot into the
|
|
|
|
|
# real default target.
|
|
|
|
|
|
|
|
|
|
PATH=/usr/sbin:$PATH
|
|
|
|
|
unitdir=/usr/lib/systemd/system
|
|
|
|
|
|
|
|
|
|
# If invoked with no arguments (for testing) write to /tmp.
|
|
|
|
|
earlydir="/tmp"
|
|
|
|
|
if [ -n "$2" ]; then
|
|
|
|
|
earlydir="$2"
|
|
|
|
|
fi
|
|
|
|
|
|
|
|
|
|
set_target ()
|
|
|
|
|
{
|
|
|
|
|
ln -sf "$unitdir/selinux-autorelabel.target" "$earlydir/default.target"
|
2023-05-09 05:40:53 +00:00
|
|
|
AUTORELABEL="1"
|
|
|
|
|
source /etc/selinux/config
|
|
|
|
|
if [ "$AUTORELABEL" = "0" ]; then
|
|
|
|
|
mkdir -p "$earlydir/selinux-autorelabel.service.d"
|
|
|
|
|
cat > "$earlydir/selinux-autorelabel.service.d/tty.conf" <<EOF
|
|
|
|
|
[Service]
|
|
|
|
|
StandardInput=tty
|
|
|
|
|
EOF
|
|
|
|
|
fi
|
2022-05-17 10:24:45 +00:00
|
|
|
}
|
|
|
|
|
|
|
|
|
|
if selinuxenabled; then
|
|
|
|
|
if test -f /.autorelabel; then
|
|
|
|
|
set_target
|
|
|
|
|
elif grep -sqE "\bautorelabel\b" /proc/cmdline; then
|
|
|
|
|
set_target
|
|
|
|
|
fi
|
|
|
|
|
fi
|
