Bug#929063: init: delegate selinux operation to separate binary

[Thorsten Glaser]

On Thu, 16 May 2019, Dmitry Bogatov wrote:

> +     if (fork() == 0) { /* child */
        if ((ret = fork()) == 0) { /* child */
> +             execl(SELINUX_CHECK, SELINUX_CHECK, NULL);
> +             fprintf(stderr, "Failed to execute helper to init SELinux\n");
> +             exit(SELINUX_CHECK_HALT);
> +     }
        } else if (ret == -1) { /* fork failed */
                fprintf(stderr, "Failed to fork to execute helper to init 
SELinux\n");
                ret = SELINUX_CHECK_HALT;
        } else { /* parent */
+               wait(&wstatus);
+               ret = WIFEXITED(wstatus) ? WEXITSTATUS(wstatus) : 
SELINUX_CHECK_HALT;
        }
> +     switch (ret) {
> +             case SELINUX_CHECK_CONTINUE: return;
[...]