Add SELinux feature

[AGL/meta-agl.git] / meta-agl-core / dynamic-layers / meta-selinux / recipes-core / systemd / files / systemd-selinux-relabel.sh

diff --git a/meta-agl-core/dynamic-layers/meta-selinux/recipes-core/systemd/files/systemd-selinux-relabel.sh b/meta-agl-core/dynamic-layers/meta-selinux/recipes-core/systemd/files/systemd-selinux-relabel.sh
new file mode 100644 (file)
index 0000000..b2557a8
--- /dev/null
+++ b/meta-agl-core/dynamic-layers/meta-selinux/recipes-core/systemd/files/systemd-selinux-relabel.sh
@@ -0,0 +1,12 @@
+#!/bin/sh
+
+# Update labels on files generated on first boot.
+/usr/sbin/restorecon -FRi /etc/systemd /etc/machine-id
+if [ $? -eq 0 ]; then
+       # Disable parent service
+       # NOTE: The service does not use the first boot functionality
+       #       in systemd as /etc/machine-id is not writeable until
+       #       after it is complete.
+       systemctl disable systemd-selinux-relabel.service
+fi
+exit 0