aboutsummaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorLennart Poettering <lennart@poettering.net>2018-12-18 13:04:43 +0100
committerLennart Poettering <lennart@poettering.net>2018-12-18 13:04:43 +0100
commit144d7f1dc6879f075ac614add5859a310fd2d67f (patch)
tree7c7e8ae68084901d0fd4ded5762df90bb38d7452
parentNEWS: update contributors list, taking new .mailmap into account (diff)
downloadsystemd-144d7f1dc6879f075ac614add5859a310fd2d67f.tar.gz
systemd-144d7f1dc6879f075ac614add5859a310fd2d67f.tar.bz2
systemd-144d7f1dc6879f075ac614add5859a310fd2d67f.zip
NEWS: add one more item
-rw-r--r--NEWS11
1 files changed, 11 insertions, 0 deletions
diff --git a/NEWS b/NEWS
index cdca45b48..a9ba9e13f 100644
--- a/NEWS
+++ b/NEWS
@@ -384,6 +384,17 @@ CHANGES WITH 240 in spe:
SD_ID128_ALLF to test if a 128bit ID is set to all 0xFF bytes, and to
initialize one to all 0xFF.
+ * After loading the SELinux policy systemd will now recursively relabel
+ all files and directories listed in
+ /run/systemd/relabel-extra.d/*.relabel (which should be simple
+ newline separated lists of paths) in addition to the ones it already
+ implicitly relabels in /run, /dev and /sys. After the relabelling is
+ completed the *.relabel files (and /run/systemd/relabel-extra.d/) are
+ removed. This is useful to permit initrds (i.e. code running before
+ the SELinux policy is in effect) to generate files in the host
+ filesystem safely and ensure that the correct label is applied during
+ the transition to the host OS.
+
* KERNEL API BREAKAGE: Linux kernel 4.18 changed behaviour regarding
mknod() handling in user namespaces. Previously mknod() would always
fail with EPERM in user namespaces. Since 4.18 mknod() will succeed