kata-containers/s390-tools
1
0
Fork 0
mirror of https://github.com/ibm-s390-linux/s390-tools.git synced 2026-08-05 02:14:52 +00:00
Code Issues Packages Projects Releases Wiki Activity

95sel-ebc: Reorder PAES enforcement service

Browse Source 
Fix the sel-ebc-paes-enforce.service to run AFTER the sysroot.mount
which prevents a TOCTOU situation.

Reviewed-by: Holger Dengler <dengler@linux.ibm.com>
Signed-off-by: Finn Callies <fcallies@linux.ibm.com>
Signed-off-by: Jan Höppner <hoeppner@linux.ibm.com>
This commit is contained in:
Finn Callies
2026-07-03 09:42:59 +02:00
committed by Jan Höppner
parent 8a52693acc
commit 4f9e5d7842
1 changed files with 2 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

3
rust/pvebc/95sel-ebc/sel-ebc-paes-enforce.service
View File

@@ -4,7 +4,8 @@ Description=Enforce PAES encrypted root fs for SEL guests
# Ensure this runs before the handoff to the real root, if that's required:
After=cryptsetup.target
After=initrd-root-device.target
Before=sysroot.mount
After=sysroot.mount
Before=initrd-switch-root.service
# Initramfs requirement
DefaultDependencies=no