From 41045aa18c286e466f10e58ea75cb601e974fa39 Mon Sep 17 00:00:00 2001
From: Tommy <contact@tommytran.io>
Date: Mon, 11 Apr 2022 19:11:38 -0400
Subject: [PATCH] Update Generic.yml

---
 Generic.yml | 14 +++++++++++---
 1 file changed, 11 insertions(+), 3 deletions(-)

diff --git a/Generic.yml b/Generic.yml
index a73c28a..db21137 100644
--- a/Generic.yml
+++ b/Generic.yml
@@ -29,9 +29,6 @@ systemd:
         RemainAfterExit=yes
         ExecStart=/usr/bin/rpm-ostree install fail2ban firewalld prelockd tuned qemu-guest-agent
         ExecStart=/bin/touch /var/lib/%N.stamp
-        ExecStart=/usr/sbin/setsebool -P container_use_cephfs off
-        ExecStart=/usr/sbin/setsebool -P virt_use_nfs off
-        ExecStart=/usr/sbin/setsebool -P virt_use_samba off
         ExecStart=/usr/bin/sed 's/nullok//g' /etc/pam.d/system-auth
         ExecStart=/usr/bin/curl https://raw.githubusercontent.com/Whonix/security-misc/master/etc/modprobe.d/30_security-misc.conf -o /etc/modprobe.d/30_security-misc.conf
         ExecStart=/bin/systemctl --no-block reboot
@@ -54,6 +51,17 @@ systemd:
         ExecStart=/usr/bin/docker run --detach --privileged --name watchtower --restart unless-stopped -v /var/run/docker.sock:/var/run/docker.sock -v /etc/localtime:/etc/localtime:ro containrrr/watchtower --schedule "0 5 0 * * 1"
         ExecStart=/bin/touch /var/lib/%N.stamp
 
+        [Install]
+        WantedBy=multi-user.target
+    - name: setsebool.service
+      enabled: true
+      contents: |
+        [Service]
+        Type=oneshot 
+        ExecStart=/usr/sbin/setsebool container_use_cephfs off
+        ExecStart=/usr/sbin/setsebool virt_use_nfs off
+        ExecStart=/usr/sbin/setsebool virt_use_samba off
+        RemainAfterExit=yes
         [Install]
         WantedBy=multi-user.target
     - name: docker.service