This commit reverts 5b0eea835d
("selinux: introduce an initial SID
for early boot processes") as it was found to cause problems on
distros with old SELinux userspace tools/libraries, specifically
Ubuntu 16.04.
Hopefully we will be able to re-add this functionality at a later
date, but let's revert this for now to help ensure a stable and
backwards compatible SELinux tree.
Link: https://lore.kernel.org/selinux/87edkseqf8.fsf@mail.lhotse
Acked-by: Ondrej Mosnacek <omosnace@redhat.com>
Signed-off-by: Paul Moore <paul@paul-moore.com>
35 lines
363 B
C
35 lines
363 B
C
/* SPDX-License-Identifier: GPL-2.0 */
|
|
|
|
#include <linux/stddef.h>
|
|
|
|
static const char *const initial_sid_to_string[] = {
|
|
NULL,
|
|
"kernel",
|
|
"security",
|
|
"unlabeled",
|
|
NULL,
|
|
"file",
|
|
NULL,
|
|
NULL,
|
|
"any_socket",
|
|
"port",
|
|
"netif",
|
|
"netmsg",
|
|
"node",
|
|
NULL,
|
|
NULL,
|
|
NULL,
|
|
NULL,
|
|
NULL,
|
|
NULL,
|
|
NULL,
|
|
NULL,
|
|
NULL,
|
|
NULL,
|
|
NULL,
|
|
NULL,
|
|
NULL,
|
|
NULL,
|
|
"devnull",
|
|
};
|
|
|