Petr Lautrbach be68cc
[Unit]
Petr Lautrbach be68cc
Description=Reset SELinux policy to factory default
Petr Lautrbach be68cc
DefaultDependencies=no
Petr Lautrbach be68cc
Requires=local-fs.target
Petr Lautrbach be68cc
Conflicts=shutdown.target
Petr Lautrbach be68cc
After=local-fs.target
Petr Lautrbach be68cc
Before=sysinit.target shutdown.target
Petr Lautrbach be68cc
ConditionSecurity=selinux
Petr Lautrbach be68cc
ConditionKernelCommandLine=|selinux-factory-reset
Petr Lautrbach be68cc
ConditionPathExists=|!/var/lib/selinux/%I/active/policy.kern
Petr Lautrbach be68cc
Petr Lautrbach be68cc
[Service]
Petr Lautrbach be68cc
ExecStart=/usr/libexec/selinux/selinux-factory-reset %I
Petr Lautrbach be68cc
Type=oneshot
Petr Lautrbach be68cc
TimeoutSec=0
Petr Lautrbach be68cc
RemainAfterExit=yes
Petr Lautrbach be68cc
StandardInput=tty