diff options
| author | Nick Kralevich <nnk@google.com> | 2013-12-09 23:30:35 +0000 |
|---|---|---|
| committer | Gerrit Code Review <noreply-gerritcodereview@google.com> | 2013-12-09 23:30:36 +0000 |
| commit | 6fec3a23046a3100c2ce1863afdd0191da69cdcc (patch) | |
| tree | 3cc83d1c34314e26c3b853b3ed7f095555267289 | |
| parent | bdf53e2a59654d2b1e8469616f1b0175b275219d (diff) | |
| parent | af06c6745bdf391c57ef29de4e6133f05c3b6187 (diff) | |
| download | system_core-6fec3a23046a3100c2ce1863afdd0191da69cdcc.zip system_core-6fec3a23046a3100c2ce1863afdd0191da69cdcc.tar.gz system_core-6fec3a23046a3100c2ce1863afdd0191da69cdcc.tar.bz2 | |
Merge "Log a warning on services that lack SELinux domains."
| -rw-r--r-- | init/init.c | 3 |
1 files changed, 3 insertions, 0 deletions
diff --git a/init/init.c b/init/init.c index 864fc6c..365726c 100644 --- a/init/init.c +++ b/init/init.c @@ -221,6 +221,9 @@ void service_start(struct service *svc, const char *dynamic_args) } rc = security_compute_create(mycon, fcon, string_to_security_class("process"), &scon); + if (rc == 0 && !strcmp(scon, mycon)) { + ERROR("Warning! Service %s needs a SELinux domain defined; please fix!\n", svc->name); + } freecon(mycon); freecon(fcon); if (rc < 0) { |