X-Git-Url: https://gerrit.automotivelinux.org/gerrit/gitweb?a=blobdiff_plain;f=meta-agl-core%2Fdynamic-layers%2Fmeta-selinux%2Frecipes-core%2Fsystemd%2Ffiles%2Fsystemd-selinux-relabel.sh;fp=meta-agl-core%2Fdynamic-layers%2Fmeta-selinux%2Frecipes-core%2Fsystemd%2Ffiles%2Fsystemd-selinux-relabel.sh;h=b2557a8d6cf58b0e0298fc7bbf16144342d14bd1;hb=2ea9cbefb8e0923f2f58e7e8022f3e134977a87a;hp=0000000000000000000000000000000000000000;hpb=6c9fa75459cf86576c47411fc239e0d7896d483c;p=AGL%2Fmeta-agl.git

diff --git a/meta-agl-core/dynamic-layers/meta-selinux/recipes-core/systemd/files/systemd-selinux-relabel.sh b/meta-agl-core/dynamic-layers/meta-selinux/recipes-core/systemd/files/systemd-selinux-relabel.sh
new file mode 100644
index 000000000..b2557a8d6
--- /dev/null
+++ b/meta-agl-core/dynamic-layers/meta-selinux/recipes-core/systemd/files/systemd-selinux-relabel.sh
@@ -0,0 +1,12 @@
+#!/bin/sh
+
+# Update labels on files generated on first boot.
+/usr/sbin/restorecon -FRi /etc/systemd /etc/machine-id
+if [ $? -eq 0 ]; then
+	# Disable parent service
+	# NOTE: The service does not use the first boot functionality
+	#       in systemd as /etc/machine-id is not writeable until
+	#       after it is complete.
+	systemctl disable systemd-selinux-relabel.service
+fi
+exit 0