config is in selinux 1:0.11.
This file is a maintainer script. It is executed when installing (*inst) or removing (*rm) the package.
The actual contents of the file can be viewed below.
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 | #!/bin/sh -e
. /usr/share/debconf/confmodule
db_input medium selinux/updategrub || true
db_go
db_get selinux/updategrub
if [ "x$RET" = xfalse ]; then
db_input critical selinux/install || true
db_go
exit 0
fi
grub_file="/etc/default/grub"
if [ -z "$grub_file" ] ; then
echo "GRUB configuration file not found."
exit 1
fi
db_set selinux/grub "$grub_file"
db_input low selinux/enforcement || true
db_input low selinux/grub || true
db_go
defopt_trim=`/bin/grep "^GRUB_CMDLINE_LINUX_DEFAULT" $grub_file | /bin/sed -r -e 's/GRUB_CMDLINE_LINUX_DEFAULT="(\s+)?//' -e 's/security=\w+(\s+)?//' -e 's/selinux=[01](\s+)?//' -e 's/(\s+)?"$(\s+)?//'`
defopt="$defopt_trim"
db_get selinux/enforcement
case "$RET" in
Enforcing)
defopt="$defopt security=selinux selinux=1 enforcing=1"
;;
Permissive)
defopt="$defopt security=selinux selinux=1 enforcing=0"
;;
*)
defopt="$defopt security=selinux selinux=1"
;;
esac
db_set selinux/defopt $defopt
db_input low selinux/defopt || true
db_go
db_input critical selinux/reboot || true
db_go
|