I want to turn on a part of the kernel to make SELinux checking more stringent.

Zbigniew Jędrzejewski-Szmek zbyszek at in.waw.pl
Fri Jan 24 15:44:52 UTC 2014


On Fri, Jan 24, 2014 at 10:22:56AM -0500, Daniel J Walsh wrote:
> ExecStart=/bin/sh -c '/bin/echo $CHECKREQPROT > /sys/fs/selinux/checkreqprot'
ExecStart=/bin/sh -c '/bin/echo ${CHECKREQPROT} > /sys/fs/selinux/checkreqprot'

I think we really need an echo command with sudo syntax. I keep a local
script which does that, called "fecho". The syntax is 'fecho [-a] arg... file',
where -a means append. Maybe something like this could be added to util-linux
or somewhere.

Zbyszek


More information about the devel mailing list