From 203decb15d6e52895fdfbfb45f66f88cd4022092 Mon Sep 17 00:00:00 2001 From: Eugeni Dodonov Date: Wed, 25 Feb 2009 19:34:09 +0000 Subject: Added option to automatically enforce msec permissions on startup. --- msec.init | 8 ++++++++ 1 file changed, 8 insertions(+) (limited to 'msec.init') diff --git a/msec.init b/msec.init index 399378c..1f20036 100755 --- a/msec.init +++ b/msec.init @@ -34,6 +34,10 @@ case "$1" in gprintf "Setting and checking MSEC permissions" /usr/sbin/msecperms -q echo_success + elif [ "$ENABLE_STARTUP_PERMS" = "enforce" ]; then + gprintf "Setting and enforcing MSEC permissions" + /usr/sbin/msecperms -q + echo_success fi ;; stop) @@ -45,11 +49,15 @@ case "$1" in else gprintf "MSEC security policy on startup: disabled" fi + echo if [ "$ENABLE_STARTUP_PERMS" = "yes" ]; then gprintf "MSEC permissions on startup: enabled" + elif [ "$ENABLE_STARTUP_PERMS" = "enforce" ]; then + gprintf "MSEC permissions on startup: enforced" else gprintf "MSEC permissions on startup: disabled" fi + echo ;; restart) $0 stop -- cgit v1.2.1