Received-SPF: pass (google.com: best guess record for domain of selinux-refpolicy-owner@vger.kernel.org designates 209.132.180.67 as permitted sender) client-ip=209.132.180.67;
Date:   Sun, 14 Jul 2019 18:16:19 +0200
From:   Dominick Grift <dac.override@gmail.com>
To:     Russell Coker <russell@coker.com.au>
Cc:     "selinux-refpolicy@vger.kernel.org" 
        <selinux-refpolicy@vger.kernel.org>
Subject: Re: systemd reboot
Message-ID: <20190714161619.GB29870@brutus.lan>
Mail-Followup-To: Russell Coker <russell@coker.com.au>,
        "selinux-refpolicy@vger.kernel.org" <selinux-refpolicy@vger.kernel.org>
References: <5834210.QDNlvuYVDn@liv>
MIME-Version: 1.0
Content-Type: multipart/signed; micalg=pgp-sha256;
        protocol="application/pgp-signature"; boundary="TRYliJ5NKNqkz5bu"
Content-Disposition: inline
In-Reply-To: <5834210.QDNlvuYVDn@liv>
User-Agent: Every email client sucks, this one just sucks less.
Sender: selinux-refpolicy-owner@vger.kernel.org
Precedence: bulk


--TRYliJ5NKNqkz5bu
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

On Mon, Jul 15, 2019 at 01:10:48AM +1000, Russell Coker wrote:
> # cat /lib/systemd/system/reboot.target
> cat: /lib/systemd/system/reboot.target: Permission denied
> # systemctl reboot
> ... it reboots
>=20
> Should systemd be doing some sort of access check on reboot.target?

I was wrong. It is doing an acccess check on reboot.target

I tried it out here: https://www.youtube.com/watch?v=3DYUATkv6R6Ys&feature=
=3Dyoutu.be

>=20
> --=20
> My Main Blog         http://etbe.coker.com.au/
> My Documents Blog    http://doc.coker.com.au/
>=20
>=20
>=20

--=20
Key fingerprint =3D 5F4D 3CDB D3F8 3652 FBD8 02D5 3B6C 5F1D 2C7B 6B02
https://sks-keyservers.net/pks/lookup?op=3Dget&search=3D0x3B6C5F1D2C7B6B02
Dominick Grift

--TRYliJ5NKNqkz5bu
Content-Type: application/pgp-signature; name="signature.asc"

-----BEGIN PGP SIGNATURE-----
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=Ddaq
-----END PGP SIGNATURE-----

--TRYliJ5NKNqkz5bu--