commit | f3a264c2e1d7d070f3606bbdb0d11382df71c6a5 | [log] [tgz] |
---|---|---|
author | Colin Walters <walters@verbum.org> | Wed Apr 26 16:26:21 2017 -0400 |
committer | Stephen Smalley <sds@tycho.nsa.gov> | Thu Apr 27 08:38:58 2017 -0400 |
tree | 8d2a2a6ef216a434de8dfb0a21f160cebe9e3655 | |
parent | 89ce96cac6ce5eeed78cb39c58514cd68494d7aa [diff] |
config: Don't finalize mount state in selinux_set_policy_root() This breaks every further call to e.g. `is_selinux_enabled()` after a policy root has been set. This tripped up some code landed in libostree: https://github.com/ostreedev/ostree/pull/797 Since in some cases we initialize a policy twice in process, and we'd call `is_selinux_enabled()` each time. More info in: http://marc.info/?l=selinux&m=149323809332417&w=2 Signed-off-by: Stephen Smalley <sds@tycho.nsa.gov>