summaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
-rw-r--r--init/README.md19
1 files changed, 19 insertions, 0 deletions
diff --git a/init/README.md b/init/README.md
index 550ef0582..b0a73b946 100644
--- a/init/README.md
+++ b/init/README.md
@@ -752,3 +752,22 @@ Below is an example of doing the same but with strace
752 kill -SIGCONT 4343 752 kill -SIGCONT 4343
753 753
754 > strace runs 754 > strace runs
755
756Host Init Script Verification
757-----------------------------
758
759Init scripts are checked for correctness during build time. Specifically the below is checked.
760
7611) Well formatted action, service and import sections, e.g. no actions without a preceding 'on'
762line, and no extraneous lines after an 'import' statement.
7632) All commands map to a valid keyword and the argument count is within the correct range.
7643) All service options are valid. This is stricter than how commands are checked as the service
765options' arguments are fully parsed, e.g. UIDs and GIDs must resolve.
766
767There are other parts of init scripts that are only parsed at runtime and therefore not checked
768during build time, among them are the below.
769
7701) The validity of the arguments of commands, e.g. no checking if file paths actually exist, if
771SELinux would permit the operation, or if the UIDs and GIDs resolve.
7722) No checking if a service exists or has a valid SELinux domain defined
7733) No checking if a service has not been previously defined in a different init script.