On Monday 26 April 2010, Jesse Keating wrote:
On Mon, 2010-04-26 at 19:02 +0300, Ville Skyttä wrote:
> Ok, do you find the attached revised version clearer?
Does /syslinux/enforce exist in cases where we're not either permissive
or enforcing?
I don't know, but it doesn't in any SELinux disabled boxes I checked. On the
other hand nothing prevents me from just creating the file there if I'm
inclined to shoot myself in the foot.
Another equally easy fix for this issue would be to use libselinux-python to
do the check, but that'd introduce a dependency.