Commit e0d82593 authored by Paul Moore's avatar Paul Moore
Browse files

selinux: increase the deprecation sleep for checkreqprot and runtime disable 



Further the checkreqprot and runtime disable deprecation efforts by
increasing the sleep time from 5 to 15 seconds to help make this more
noticeable for any users who are still using these knobs.

Acked-by: default avatarCasey Schaufler <casey@schaufler-ca.com>
Signed-off-by: default avatarPaul Moore <paul@paul-moore.com>
parent 9abf2313

security/selinux/selinuxfs.c

+2 −2
Original line number Diff line number Diff line
@@ -294,7 +294,7 @@ static ssize_t sel_write_disable(struct file *file, const char __user *buf, 
	 */

	pr_err("SELinux:  Runtime disable is deprecated, use selinux=0 on the kernel cmdline.\n");

	pr_err("SELinux:  https://github.com/SELinuxProject/selinux-kernel/wiki/DEPRECATE-runtime-disable\n");

	ssleep(5);

	ssleep(15);



	if (count >= PAGE_SIZE)

		return -ENOMEM;
@@ -763,7 +763,7 @@ static ssize_t sel_write_checkreqprot(struct file *file, const char __user *buf, 


	checkreqprot_set(fsi->state, (new_value ? 1 : 0));

	if (new_value)

		ssleep(5);

		ssleep(15);

	length = count;



	selinux_ima_measure_state(fsi->state);