Blame SOURCES/selinux-check-proper-disable.service

1d3527
[Unit]
1d3527
Description=Check that SELinux is not disabled the unsafe way
1d3527
ConditionKernelCommandLine=!selinux=0
1d3527
After=sysinit.target
1d3527
1d3527
[Service]
1d3527
Type=oneshot
1d3527
EnvironmentFile=/etc/selinux/config
1d3527
ExecCondition=test "$SELINUX" = disabled
1d3527
ExecStart=/usr/bin/echo 'SELINUX=disabled in /etc/selinux/config, but no selinux=0 on kernel command line - SELinux may not be fully disabled. Please update bootloader configuration to pass selinux=0 to kernel at boot.'
1d3527
StandardOutput=journal+console
1d3527
SyslogLevel=warning
1d3527
1d3527
[Install]
1d3527
WantedBy=multi-user.target