diff options
| author | Lennart Poettering <lennart@poettering.net> | 2015-11-27 20:22:56 +0100 |
|---|---|---|
| committer | Lennart Poettering <lennart@poettering.net> | 2015-11-27 20:28:13 +0100 |
| commit | 6355e75610a8d47fc3ba5ab8bd442172a2cfe574 (patch) | |
| tree | e71ec8fc1fdb2cef3d06a2b50f1f27b22199391e /src/basic/selinux-util.h | |
| parent | 564c44436cf64adc7a9eff8c17f386899194a893 (diff) | |
| download | systemd-6355e75610a8d47fc3ba5ab8bd442172a2cfe574.tar.gz | |
selinux: split up mac_selinux_have() from mac_selinux_use()
Let's distuingish the cases where our code takes an active role in
selinux management, or just passively reports whatever selinux
properties are set.
mac_selinux_have() now checks whether selinux is around for the passive
stuff, and mac_selinux_use() for the active stuff. The latter checks the
former, plus also checks UID == 0, under the assumption that only when
we run priviliged selinux management really makes sense.
Fixes: #1941
Diffstat (limited to 'src/basic/selinux-util.h')
| -rw-r--r-- | src/basic/selinux-util.h | 1 |
1 files changed, 1 insertions, 0 deletions
diff --git a/src/basic/selinux-util.h b/src/basic/selinux-util.h index d19984c5fe..95a2fcdbca 100644 --- a/src/basic/selinux-util.h +++ b/src/basic/selinux-util.h @@ -27,6 +27,7 @@ #include "macro.h" bool mac_selinux_use(void); +bool mac_selinux_have(void); void mac_selinux_retest(void); int mac_selinux_init(const char *prefix); |