You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Hi!
I prepared systemd units for loading saractl config at startup and reloading rules automatically at every config change. I think you can add them to saractl package. All files should be installed to /usr/lib/systemd/system or /lib/systemd/system depending on distibution.
# /usr/lib/systemd/system/saractl.service
[Unit]
Description=Userspace counterpart of the S.A.R.A. LSM
DefaultDependencies=no
After=systemd-remount-fs.service
Before=sysinit.target
ConditionPathExists=/sys/kernel/security/sara
[Service]
Type=oneshot
ExecStart=/usr/bin/saractl startup
[Install]
WantedBy=sysinit.target
# /usr/lib/systemd/system/saractl-reload.service
[Unit]
Description=Userspace counterpart of the S.A.R.A. LSM
[Service]
Type=oneshot
ExecStart=/usr/bin/saractl load
# /usr/lib/systemd/system/saractl-reload.path
[Unit]
Description=Userspace counterpart of the S.A.R.A. LSM
ConditionPathExists=/sys/kernel/security/sara
[Path]
PathChanged=/etc/sara/wxprot.conf.d/
[Install]
WantedBy=multi-user.target
Hi!
I prepared systemd units for loading saractl config at startup and reloading rules automatically at every config change. I think you can add them to saractl package. All files should be installed to
/usr/lib/systemd/system
or/lib/systemd/system
depending on distibution.To enable and start units at system startup run:
saractl.service.txt
saractl-reload.path.txt
saractl-reload.service.txt
The text was updated successfully, but these errors were encountered: