Blame selinux-check-proper-disable.service
c9s-sig-hyperscale
Ondrej Mosnacek
fd6943 [Unit]Ondrej Mosnacek
fd6943 Description=Check that SELinux is not disabled the unsafe wayOndrej Mosnacek
fd6943 ConditionKernelCommandLine=!selinux=0Ondrej Mosnacek
fd6943 After=sysinit.targetOndrej Mosnacek
fd6943 Ondrej Mosnacek
fd6943 [Service]Ondrej Mosnacek
fd6943 Type=oneshotOndrej Mosnacek
fd6943 EnvironmentFile=/etc/selinux/configOndrej Mosnacek
fd6943 ExecCondition=test "$SELINUX" = disabledOndrej Mosnacek
fd6943 ExecStart=/usr/bin/echo 'SELINUX=disabled in /etc/selinux/config, but no selinux=0 on kernel command line - SELinux may not be fully disabled. Please update bootloader configuration to pass selinux=0 to kernel at boot.'Ondrej Mosnacek
fd6943 StandardOutput=journal+consoleOndrej Mosnacek
fd6943 SyslogLevel=warningOndrej Mosnacek
fd6943 Ondrej Mosnacek
fd6943 [Install]Ondrej Mosnacek
fd6943 WantedBy=multi-user.target