aa2dbf
[Unit]
aa2dbf
Description=Check that SELinux is not disabled the unsafe way
aa2dbf
ConditionKernelCommandLine=!selinux=0
aa2dbf
After=sysinit.target
aa2dbf
aa2dbf
[Service]
aa2dbf
Type=oneshot
aa2dbf
EnvironmentFile=/etc/selinux/config
aa2dbf
ExecCondition=test "$SELINUX" = disabled
aa2dbf
ExecStart=/usr/bin/echo 'SELINUX=disabled in /etc/selinux/config, but no selinux=0 on kernel command line - SELinux may not be fully disabled. Please update bootloader configuration to pass selinux=0 to kernel at boot.'
aa2dbf
StandardOutput=journal+console
aa2dbf
SyslogLevel=warning
aa2dbf
aa2dbf
[Install]
aa2dbf
WantedBy=multi-user.target