fd69433
[Unit]
fd69433
Description=Check that SELinux is not disabled the unsafe way
fd69433
ConditionKernelCommandLine=!selinux=0
fd69433
After=sysinit.target
fd69433
fd69433
[Service]
fd69433
Type=oneshot
fd69433
EnvironmentFile=/etc/selinux/config
fd69433
ExecCondition=test "$SELINUX" = disabled
fd69433
ExecStart=/usr/bin/echo 'SELINUX=disabled in /etc/selinux/config, but no selinux=0 on kernel command line - SELinux may not be fully disabled. Please update bootloader configuration to pass selinux=0 to kernel at boot.'
fd69433
StandardOutput=journal+console
fd69433
SyslogLevel=warning
fd69433
fd69433
[Install]
fd69433
WantedBy=multi-user.target