Use systemctl preset rather than enable.

This will use the package preset rules rather than hardcoding enabling which
allows use to separate policy from action.

We should really update msec to write out /etc/systemd/system-preset/*.preset
file according to the current system level. This would replace our parsing of
/etc/security/msec/server file (which is a symlink) in these scripts and
would allow administrators (or just the security level itself) to dictate
whether newly installed services are enabled or not when installed.

1 files changed, 1 insertions, 1 deletions

diff --git a/add-service b/add-service
index 684d3db..6314c76 100755
--- a/add-service
+++ b/add-service
@@ -128,7 +128,7 @@ add_service() {
 
     # Actually do enable/disable foo
     if [ -n "$units_to_enable" ]; then
-        /bin/systemctl --quiet enable $units_to_enable >/dev/null
+        /bin/systemctl --quiet preset $units_to_enable >/dev/null
         if [ -n "$srv" -a ! -f "${systemd_migration_dir}/$srv" ]; then
             touch "${systemd_migration_dir}/$srv"
         fi