Re: RFC: earlyinit_t

On Friday, 19 June 2026 09:30:55 AEST Rahul Sandhu wrote:
> I think the concern is less that and moreso when policy is loaded. Off
> the top of my head, an example I can think of was one system I saw from
> a little while back which had the policy binary in the initramfs itself
> and hence loaded it midway through initramfs' setup and the switchroot.

Who does that nowadays?

https://etbe.coker.com.au/2008/07/24/se-linux-policy-loading/

I've written about my past tests with initrd policy and why I decided that was 
a bad idea.

> Once policy is loaded however, I'm not aware of any _processes_ that do
> persist beyond the initramfs. On my system, both journald and udev end
> up re-exec'd for example.

Great!

-- 
My Main Blog         http://etbe.coker.com.au/
My Documents Blog    http://doc.coker.com.au/