summaryrefslogtreecommitdiffstats
path: root/system-build/scripts/build/chroot_selinuxfs
blob: 66d4639940db61cc0ad46647c8a9d441aadaa251 (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
#!/bin/sh

## live-build(7) - System Build Scripts
## Copyright (C) 2006-2015 Daniel Baumann <mail@daniel-baumann.ch>
##
## This program comes with ABSOLUTELY NO WARRANTY; for details see COPYING.
## This is free software, and you are welcome to redistribute it
## under certain conditions; see COPYING for details.


set -e

# Including common functions
[ -e "${LIVE_BUILD}/scripts/build.sh" ] && . "${LIVE_BUILD}/scripts/build.sh" || . /usr/lib/live/build.sh

# Setting static variables
DESCRIPTION="$(Echo 'mount /sys/fs/selinux')"
HELP=""
USAGE="${PROGRAM} {install|remove} [--force]"

Arguments "${@}"

# Reading configuration files
Read_conffiles config/all config/common config/bootstrap config/system config/binary config/source
Set_defaults

# Requiring stage file
Require_stagefile .build/config .build/bootstrap

case "${1}" in
	install)
		if [ -e /sys/fs/selinux/enforce ] && [ "$(cat /sys/fs/selinux/enforce)" = "1" ]
		then
			Echo_message "Begin mounting /sys/fs/selinux..."

			# Checking stage file
			Check_stagefile .build/chroot_selinuxfs

			# Checking lock file
			Check_lockfile .lock

			# Creating lock file
			Create_lockfile .lock

			# Create mountpoint
			mkdir -p chroot/sys/fs/selinux

			# Mounting /sys/fs/selinux
			mount selinuxfs-live -t selinuxfs chroot/sys/fs/selinux

			# Creating stage file
			Create_stagefile .build/chroot_selinuxfs
		fi
		;;

	remove)
		Echo_message "Begin unmounting /sys/fs/selinux..."

		# Checking lock file
		Check_lockfile .lock

		# Creating lock file
		Create_lockfile .lock

		# Unmounting /sys/fs/selinux
		if [ -e chroot/sys/fs/selinux/enforce ]
		then
			umount chroot/sys/fs/selinux
		fi

		# Removing stage file
		rm -f .build/chroot_selinux
		;;

	*)
		Usage
		;;
esac