exec: Add SELinuxContext configuration item

This permit to let system administrators decide of the domain of a service.
This can be used with templated units to have each service in a différent
domain ( for example, a per customer database, using MLS or anything ),
or can be used to force a non selinux enabled system (jvm, erlang, etc)
to start in a different domain for each service.
This commit is contained in:
Michael Scherer
2014-02-10 13:18:16 +01:00
committed by Lennart Poettering
parent 36e0e6311b
commit 7b52a628f8
7 changed files with 48 additions and 2 deletions
+2
View File
@@ -133,6 +133,8 @@ struct ExecContext {
char *utmp_id;
char *selinux_context;
char **read_write_dirs, **read_only_dirs, **inaccessible_dirs;
unsigned long mount_flags;