smack: Add DefaultSmackProcessLabel to user.conf and system.conf
DefaultSmackProcessLabel tells systemd what label to assign to its child process in case SmackProcessLabel is not set in the service file. By default, when DefaultSmackProcessLabel is not set child processes inherit label from systemd. If DefaultSmackProcessLabel is set to "/" (which is an invalid character for a SMACK label) the DEFAULT_SMACK_PROCESS_LABEL set during compilation is ignored and systemd act as if the option was unset.
This commit is contained in:
committed by
Luca Boccassi
parent
8880c3be82
commit
aa5ae9711e
@@ -1167,6 +1167,11 @@ if have
|
||||
conf.set_quoted('SMACK_RUN_LABEL', get_option('smack-run-label'))
|
||||
endif
|
||||
|
||||
have = get_option('smack') and get_option('smack-default-process-label') != ''
|
||||
if have
|
||||
conf.set_quoted('SMACK_DEFAULT_PROCESS_LABEL', get_option('smack-default-process-label'))
|
||||
endif
|
||||
|
||||
want_polkit = get_option('polkit')
|
||||
install_polkit = false
|
||||
install_polkit_pkla = false
|
||||
|
||||
Reference in New Issue
Block a user