live-build/scripts/build/chroot_selinuxfs

#!/bin/sh

## live-build(7) - System Build Scripts
## Copyright (C) 2006-2015 Daniel Baumann <mail@daniel-baumann.ch>
##
## This program comes with ABSOLUTELY NO WARRANTY; for details see COPYING.
## This is free software, and you are welcome to redistribute it
## under certain conditions; see COPYING for details.


set -e

# Including common functions
[ -e "${LIVE_BUILD}/scripts/build.sh" ] && . "${LIVE_BUILD}/scripts/build.sh" || . /usr/lib/live/build.sh

# Setting static variables
DESCRIPTION="$(Echo 'mount /sys/fs/selinux')"
HELP=""
USAGE="${PROGRAM} {install|remove} [--force]"

Arguments "${@}"

# Reading configuration files
Read_conffiles config/all config/common config/bootstrap config/chroot config/binary config/source
Set_defaults

# Requiring stage file
Require_stagefile .build/config .build/bootstrap

case "${1}" in
	install)
		if [ -e /sys/fs/selinux/enforce ] && [ "$(cat /sys/fs/selinux/enforce)" = "1" ]
		then
			Echo_message "Begin mounting /sys/fs/selinux..."

			# Checking stage file
			Check_stagefile .build/chroot_selinuxfs

			# Checking lock file
			Check_lockfile .lock

			# Creating lock file
			Create_lockfile .lock

			# Create mountpoint
			mkdir -p chroot/sys/fs/selinux

			# Mounting /sys/fs/selinux
			mount selinuxfs-live -t selinuxfs chroot/sys/fs/selinux

			# Creating stage file
			Create_stagefile .build/chroot_selinuxfs
		fi
		;;

	remove)
		Echo_message "Begin unmounting /sys/fs/selinux..."

		# Checking lock file
		Check_lockfile .lock

		# Creating lock file
		Create_lockfile .lock

		# Unmounting /sys/fs/selinux
		if [ -e chroot/sys/fs/selinux/enforce ]
		then
			umount chroot/sys/fs/selinux
		fi

		# Removing stage file
		rm -f .build/chroot_selinux
		;;

	*)
		Usage
		;;
esac