95sel-ebc: Fix SICS existence check

Fix the sel-ebc-pvebc.service unit to execute the failure action when
the sics directory does not exist instead of getting skipped.

Reviewed-by: Holger Dengler <dengler@linux.ibm.com>
Signed-off-by: Finn Callies <fcallies@linux.ibm.com>
Signed-off-by: Jan Höppner <hoeppner@linux.ibm.com>

rust/pvebc/95sel-ebc/pvebc-wrapper.sh

@@ -20,6 +20,12 @@ if [[ $(cat $SYSFS) -ne 1 ]]; then
 fi
 echo "Running in SEL guest."
 
+# Check SICS existence
+if [[ ! -d "${SICS}" ]]; then
+	echo "${SICS} does not exist"
+	exit 1
+fi
+
 # Copy EBC resources from /boot/sics to tmpfs for security
 # This protects against host injection attacks by moving resources to UV-protected RAM
 echo "Copying EBC resources from $SICS to $EBC_TMPFS"

rust/pvebc/95sel-ebc/sel-ebc-pvebc.service

@@ -17,7 +17,6 @@ After=sel-ebc-boot-mount.service
 DefaultDependencies=no
 # Make absolutely sure this only runs in initramfs
 ConditionPathExists=/etc/initrd-release
-AssertPathIsDirectory=/boot/sics
 ConditionKernelCommandLine=rd.sel-ebc
 
 [Service]