#!/bin/sh

PREREQ="ksaf_relabel"

prereqs()
{
    echo "$PREREQ"
}

case $1 in
    prereqs)
        prereqs
        exit 0
        ;;
esac

. /scripts/functions
. /scripts/security-functions

ksaf_label_manager=/usr/sbin/ksaf-label-manager
ksaf_main_policy_init=/usr/sbin/ksaf-main-policy-init

ksaf_init_policy()
{
	if ! grep -q " ${rootmnt} .*rw" /proc/mounts; then
		mount -o remount,rw ${ROOT} ${rootmnt}
	fi

	${ksaf_label_manager} --sync-path-id --rootmnt ${rootmnt}

	${ksaf_main_policy_init} -P ${rootmnt}

}

cmdline=$(cat /proc/cmdline)

if echo "$cmdline" | grep -qE 'lsm=([^,]+,)*[^,]*ksaf([^,]*|$)'; then
    ksaf_init_policy
fi
