فهرست منبع

debian: remove SELinux disabling code

Debian doesn't have it enabled anyway. Do not prevent the user from
tinkering with that.

(reported by @adrelanos)
Fixes qubesos/qubes-issues#1103
Marek Marczykowski-Górecki 8 سال پیش
والد
کامیت
c6fa6c9b19
2فایلهای تغییر یافته به همراه0 افزوده شده و 17 حذف شده
  1. 0 16
      debian/qubes-core-agent.postinst
  2. 0 1
      debian/qubes-core-agent.triggers

+ 0 - 16
debian/qubes-core-agent.postinst

@@ -62,15 +62,6 @@ installSerialConf() {
     fi
 }
 
-disableSELinux() {
-    debug "Disabling SELinux..."
-    if [ -e /etc/selinux/config ]; then
-        sed -e s/^SELINUX=.*$/SELINUX=disabled/ </etc/selinux/config >/etc/selinux/config.processed
-        mv /etc/selinux/config.processed /etc/selinux/config
-        setenforce 0 2>/dev/null
-    fi
-}
-
 case "${1}" in
     configure)
         # Initial installation of package only
@@ -119,9 +110,6 @@ case "${1}" in
 
             # Maybe install overridden serial.conf init script 
             installSerialConf
-
-            # Maybe disable SELinux
-            disableSELinux
         fi
 
         debug "UPDATE..."
@@ -187,10 +175,6 @@ case "${1}" in
                     installSerialConf
                     ;;
 
-                # Disable SELinux"
-                /etc/selinux/config)
-                    disableSELinux
-                    ;;
             esac
         done
         exit 0

+ 0 - 1
debian/qubes-core-agent.triggers

@@ -1,4 +1,3 @@
 interest-noawait /usr/share/applications
 interest-noawait /etc/xdg
 interest-noawait /etc/init/serial.conf
-interest-noawait /etc/selinux/config