be68cc
[Unit]
be68cc
Description=Reset SELinux policy to factory default
be68cc
DefaultDependencies=no
be68cc
Requires=local-fs.target
be68cc
Conflicts=shutdown.target
be68cc
After=local-fs.target
be68cc
Before=sysinit.target shutdown.target
be68cc
ConditionSecurity=selinux
be68cc
ConditionKernelCommandLine=|selinux-factory-reset
be68cc
ConditionPathExists=|!/var/lib/selinux/%I/active/policy.kern
be68cc
be68cc
[Service]
be68cc
ExecStart=/usr/libexec/selinux/selinux-factory-reset %I
be68cc
Type=oneshot
be68cc
TimeoutSec=0
be68cc
RemainAfterExit=yes
be68cc
StandardInput=tty