Currently the label database is not reloaded with libselinux 3.2 on a policy reload. Since libselinux 3.2 avc_open(3) uses the SELinux status page instead of a netlink socket to check for policy reloads. The status page is also queried in mac_selinux_maybe_reload(). Thus calls to selinux_check_access(3) might consume an update, queried by selinux_status_updated(3), leaving mac_selinux_maybe_reload() unable to detect a policy reload. Do not use selinux_status_updated(3), use selinux_status_policyload(3) unconditionally. Relevant libselinux commit: https://github.com/SELinuxProject/selinux/commit/05bdc03130d741e53e1fb45a958d0a2c184be503 Debian Bullseye is going to ship libselinux 3.1, so stay compatible for backports.
System and Service Manager
Details
Most documentation is available on systemd's web site.
Assorted, older, general information about systemd can be found in the systemd Wiki.
Information about build requirements is provided in the README file.
Consult our NEWS file for information about what's new in the most recent systemd versions.
Please see the Hacking guide for information on how to hack on systemd and test your modifications.
Please see our Contribution Guidelines for more information about filing GitHub Issues and posting GitHub Pull Requests.
When preparing patches for systemd, please follow our Coding Style Guidelines.
If you are looking for support, please contact our mailing list or join our IRC channel.
Stable branches with backported patches are available in the stable repo.
