2 Commits

Author	SHA1	Message	Date
Dmitry Sharshakov	4caeae21e5	refactor: optimize flags and SetLabel ... Do not do string lookups in repetitive calls. We do not support changing SELinux status during runtime, so once we read this we can assume status does not change. Also avoid unneeded FS writes when appropriate label is already set on file. Signed-off-by: Dmitry Sharshakov <dmitry.sharshakov@siderolabs.com>	2024-11-21 08:25:49 +01:00
Dmitry Sharshakov	960a040491	feat: start enabling SELinux ... Part of: #9127 Label executables and processes, build, load and manage SELinux policy, enable audit support. Labeling filesystems, devices and runtime files will be done in further changes, see the full PR. Signed-off-by: Dmitry Sharshakov <dmitry.sharshakov@siderolabs.com>	2024-11-04 16:56:53 +01:00