Received-SPF: pass (google.com: best guess record for domain of selinux-refpolicy-owner@vger.kernel.org designates 209.132.180.67 as permitted sender) client-ip=209.132.180.67;
Date:   Sun, 14 Jul 2019 17:23:57 +0200
From:   Dominick Grift <dac.override@gmail.com>
To:     Russell Coker <russell@coker.com.au>
Cc:     "selinux-refpolicy@vger.kernel.org" 
        <selinux-refpolicy@vger.kernel.org>
Subject: Re: systemd reboot
Message-ID: <20190714152357.GA29870@brutus.lan>
Mail-Followup-To: Russell Coker <russell@coker.com.au>,
        "selinux-refpolicy@vger.kernel.org" <selinux-refpolicy@vger.kernel.org>
References: <5834210.QDNlvuYVDn@liv>
MIME-Version: 1.0
Content-Type: multipart/signed; micalg=pgp-sha256;
        protocol="application/pgp-signature"; boundary="+QahgC5+KEYLbs62"
Content-Disposition: inline
In-Reply-To: <5834210.QDNlvuYVDn@liv>
User-Agent: Every email client sucks, this one just sucks less.
Sender: selinux-refpolicy-owner@vger.kernel.org
Precedence: bulk


--+QahgC5+KEYLbs62
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

On Mon, Jul 15, 2019 at 01:10:48AM +1000, Russell Coker wrote:
> # cat /lib/systemd/system/reboot.target
> cat: /lib/systemd/system/reboot.target: Permission denied
> # systemctl reboot
> ... it reboots
>=20
> Should systemd be doing some sort of access check on reboot.target?

I don't think so. The access check is on systemd-reboot.service i believe.

>=20
> --=20
> My Main Blog         http://etbe.coker.com.au/
> My Documents Blog    http://doc.coker.com.au/
>=20
>=20
>=20

--=20
Key fingerprint =3D 5F4D 3CDB D3F8 3652 FBD8 02D5 3B6C 5F1D 2C7B 6B02
https://sks-keyservers.net/pks/lookup?op=3Dget&search=3D0x3B6C5F1D2C7B6B02
Dominick Grift

--+QahgC5+KEYLbs62
Content-Type: application/pgp-signature; name="signature.asc"

-----BEGIN PGP SIGNATURE-----
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=HWMm
-----END PGP SIGNATURE-----

--+QahgC5+KEYLbs62--