Re: temporary hack to use udev in selinux

[Luke Kenneth Casson Leighton <lkcl@lkcl.net>]

On Thu, Jul 29, 2004 at 08:47:48AM -0400, Stephen Smalley wrote:
> On Wed, 2004-07-28 at 22:04, Luke Kenneth Casson Leighton wrote:
> > okay, i've added in some stuff for tmpfs, just like chris did,
> > joshua.

> Please prepare a patch for upstreaming, as this is definitely a desired
> feature (tmpfs xattr support for SELinux).  

 okay.

> However, tmpfs may be a bit
> tricky to handle correctly, because it is also used for the shmem pseudo
> filesystem, and the current policy only allows access based on that
> usage at the moment.

 i don't follow entirely... ah, do you mean, tmpfs_t covers _both_ shmem
 _and_ tmpfs, so if i add xattr support and people start using it as
 tmpfs, then the policies are, yes, i think i get it.

 ... is there a way of supporting both names shmfs and tmpfs in
 the mount command and also in the kernel, such that they are
 distinguishable that way?

 i.e. it's the same kernel code, but it can be mounted with two
 different names.

 is that reasonable or unreasonable?

 l.


--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.