Automatically mount selinuxfs on /selinux in localmount.

This commit is contained in:
Mike Frysinger 2007-04-20 10:47:24 +00:00
parent f269f1961b
commit a316a1fa72
2 changed files with 19 additions and 4 deletions

View File

@ -1,6 +1,10 @@
# ChangeLog for Gentoo System Intialization ("rc") scripts # ChangeLog for Gentoo System Intialization ("rc") scripts
# Copyright 1999-2007 Gentoo Foundation; Distributed under the GPLv2 # Copyright 1999-2007 Gentoo Foundation; Distributed under the GPLv2
20 Apr 2007; Mike Frysinger <vapier@gentoo.org>:
Automatically mount selinuxfs on /selinux in localmount.
20 Apr 2007; Roy Marples <uberlord@gentoo.org>: 20 Apr 2007; Roy Marples <uberlord@gentoo.org>:
Plugins now run in a forked process for extra resliance. Plugins now run in a forked process for extra resliance.

View File

@ -75,21 +75,32 @@ start() {
# Setup Kernel Support for miscellaneous Binary Formats # Setup Kernel Support for miscellaneous Binary Formats
if [ -d /proc/sys/fs/binfmt_misc ] ; then if [ -d /proc/sys/fs/binfmt_misc ] ; then
if [ -n "$(grep -Fow binfmt_misc /proc/filesystems)" ] ; then if grep -qs binfmt_misc /proc/filesystems ; then
ebegin "Mounting misc binary format filesystem" ebegin "Mounting misc binary format filesystem"
mount -t binfmt_misc -o nodev,noexec,nosuid \ mount -t binfmt_misc -o nodev,noexec,nosuid \
binfmt_misc /proc/sys/fs/binfmt_misc binfmt_misc /proc/sys/fs/binfmt_misc
eend $? eend $?
fi fi
fi fi
# Setup Kernel Support for securityfs
if [ -d /sys/kernel/security ] ; then if [ -d /sys/kernel/security ] ; then
if [ -n "$(grep -Fow securityfs /proc/filesystems)" ] ; then if grep -qs securityfs /proc/filesystems ; then
ebegin "Mounting security filesystem" ebegin "Mounting security filesystem"
mount -t securityfs securityfs /sys/kernel/security \ mount -t securityfs securityfs /sys/kernel/security \
-o nodev,noexec,nosuid -o nodev,noexec,nosuid
eend $? eend $?
fi fi
fi fi
# Setup Kernel Support for SELinux
if [ -d /selinux ] ; then
if grep -qs selinuxfs /proc/filesystems ; then
ebegin "Mounting SELinux filesystem"
mount -t selinuxfs selinuxfs /selinux
eend $?
fi
fi
fi fi
# We do our swapping here instead of rc so we can get urandom started # We do our swapping here instead of rc so we can get urandom started