main: added support for loading IMA custom policies

[elogind.git] / src / main.c

diff --git a/src/main.c b/src/main.c
index a849824bb3fb2cf92645690bb16b881533a4e2c4..7ae88414a93a74ed7c09791c86646a7c02c8bd25 100644 (file)
--- a/src/main.c
+++ b/src/main.c
@@ -41,6 +41,7 @@
 #include "kmod-setup.h"
 #include "locale-setup.h"
 #include "selinux-setup.h"
 #include "kmod-setup.h"
 #include "locale-setup.h"
 #include "selinux-setup.h"

+#include "ima-setup.h"

 #include "machine-id-setup.h"
 #include "load-fragment.h"
 #include "fdset.h"
 #include "machine-id-setup.h"
 #include "load-fragment.h"
 #include "fdset.h"


@@ -323,6 +324,26 @@ static int parse_proc_cmdline_word(const char *word) {
                         log_warning("Failed to parse default standard error switch %s. Ignoring.", word + 31);
                 else
                         arg_default_std_error = r;
                         log_warning("Failed to parse default standard error switch %s. Ignoring.", word + 31);
                 else
                         arg_default_std_error = r;

+        } else if (startswith(word, "systemd.setenv=")) {
+                char *cenv, *eq;
+                int r;
+
+                cenv = strdup(word + 15);
+                if (!cenv)
+                        return -ENOMEM;
+
+                eq = strchr(cenv, '=');
+                if (!eq) {
+                        r = unsetenv(cenv);
+                        if (r < 0)
+                                log_warning("unsetenv failed %s. Ignoring.", strerror(errno));
+                } else {
+                        *eq = 0;
+                        r = setenv(cenv, eq + 1, 1);
+                        if (r < 0)
+                                log_warning("setenv failed %s. Ignoring.", strerror(errno));
+                }
+                free(cenv);

 #ifdef HAVE_SYSV_COMPAT
         } else if (startswith(word, "systemd.sysv_console=")) {
                 int r;
 #ifdef HAVE_SYSV_COMPAT
         } else if (startswith(word, "systemd.sysv_console=")) {
                 int r;


@@ -1183,9 +1204,12 @@ int main(int argc, char *argv[]) {
                 arg_running_as = MANAGER_SYSTEM;
                 log_set_target(detect_container(NULL) > 0 ? LOG_TARGET_CONSOLE : LOG_TARGET_JOURNAL_OR_KMSG);
 
                 arg_running_as = MANAGER_SYSTEM;
                 log_set_target(detect_container(NULL) > 0 ? LOG_TARGET_CONSOLE : LOG_TARGET_JOURNAL_OR_KMSG);
 

-                if (!is_reexec)
+                if (!is_reexec) {

                         if (selinux_setup(&loaded_policy) < 0)
                                 goto finish;
                         if (selinux_setup(&loaded_policy) < 0)
                                 goto finish;

+                        if (ima_setup() < 0)
+                                goto finish;
+                }

 
                 log_open();
 
 
                 log_open();