debian: remove SELinux disabling code
Debian doesn't have it enabled anyway. Do not prevent the user from tinkering with that. (reported by @adrelanos) Fixes qubesos/qubes-issues#1103
This commit is contained in:
parent
a32020fb25
commit
c6fa6c9b19
16
debian/qubes-core-agent.postinst
vendored
16
debian/qubes-core-agent.postinst
vendored
@ -62,15 +62,6 @@ installSerialConf() {
|
|||||||
fi
|
fi
|
||||||
}
|
}
|
||||||
|
|
||||||
disableSELinux() {
|
|
||||||
debug "Disabling SELinux..."
|
|
||||||
if [ -e /etc/selinux/config ]; then
|
|
||||||
sed -e s/^SELINUX=.*$/SELINUX=disabled/ </etc/selinux/config >/etc/selinux/config.processed
|
|
||||||
mv /etc/selinux/config.processed /etc/selinux/config
|
|
||||||
setenforce 0 2>/dev/null
|
|
||||||
fi
|
|
||||||
}
|
|
||||||
|
|
||||||
case "${1}" in
|
case "${1}" in
|
||||||
configure)
|
configure)
|
||||||
# Initial installation of package only
|
# Initial installation of package only
|
||||||
@ -119,9 +110,6 @@ case "${1}" in
|
|||||||
|
|
||||||
# Maybe install overridden serial.conf init script
|
# Maybe install overridden serial.conf init script
|
||||||
installSerialConf
|
installSerialConf
|
||||||
|
|
||||||
# Maybe disable SELinux
|
|
||||||
disableSELinux
|
|
||||||
fi
|
fi
|
||||||
|
|
||||||
debug "UPDATE..."
|
debug "UPDATE..."
|
||||||
@ -187,10 +175,6 @@ case "${1}" in
|
|||||||
installSerialConf
|
installSerialConf
|
||||||
;;
|
;;
|
||||||
|
|
||||||
# Disable SELinux"
|
|
||||||
/etc/selinux/config)
|
|
||||||
disableSELinux
|
|
||||||
;;
|
|
||||||
esac
|
esac
|
||||||
done
|
done
|
||||||
exit 0
|
exit 0
|
||||||
|
1
debian/qubes-core-agent.triggers
vendored
1
debian/qubes-core-agent.triggers
vendored
@ -1,4 +1,3 @@
|
|||||||
interest-noawait /usr/share/applications
|
interest-noawait /usr/share/applications
|
||||||
interest-noawait /etc/xdg
|
interest-noawait /etc/xdg
|
||||||
interest-noawait /etc/init/serial.conf
|
interest-noawait /etc/init/serial.conf
|
||||||
interest-noawait /etc/selinux/config
|
|
||||||
|
Loading…
Reference in New Issue
Block a user