From f738fe3f561fbc53f356f10f8f77d5e5f3b86d84 Mon Sep 17 00:00:00 2001 From: Bill Nottingham Date: Tue, 29 Jun 2010 12:53:37 -0400 Subject: Don't directly execute bash for single-user mode, as that has SELinux issues. (#540216, #584443, #585053) If upstart directly runs bash for single-user mode, there's no way for SELinux to set the proper context (to distinguish it from other init scripts). Inserting a helper binary in the way allows for this. While we're changing this, we make it configurable so it's easily possible for people to use sulogin if they so desire. --- sysconfig/init | 3 +++ 1 file changed, 3 insertions(+) (limited to 'sysconfig/init') diff --git a/sysconfig/init b/sysconfig/init index 959c4d83..1a746088 100644 --- a/sysconfig/init +++ b/sysconfig/init @@ -23,3 +23,6 @@ PROMPT=yes AUTOSWAP=no # What ttys should gettys be started on? ACTIVE_CONSOLES=/dev/tty[1-6] +# Set to '/sbin/sulogin' to prompt for password on single-user mode +# Set to '/sbin/sushell' otherwise +SINGLE=/sbin/sushell -- cgit v1.2.1