[POLICY/PATCH] IA-64 Boot Partition

[KaiGai Kohei <kaigai@kaigai.gr.jp>]

[-- Attachment #1: Type: text/plain, Size: 700 bytes --]

Hello,

This attached patch modifies genfs_contexts.
When arch_ia64 is defined in tunable/tunable.tun,
vfat is labeled as boot_t, not dosfs_t.

Currently, vfat-fs is recognized as dosfs_t.
But, vfat is often used as bootable partition
which should be labeled as boot_t.

In IA-64 Linux, any files related to booting process such as
vmlinuz and initrd.img are placed under /boot/efi/.
We must mount a vfat partition contains such files on /boot/efi,
because EFI can't recognize the contents of Ext2/3 partitions.
(EFI is a firmware similar to PC's BIOS.)
# The kernel provided by RedHat is placed in /boot/efi/efi/redhat.

Thanks,
--
DO NOTHING IS THE WORST POLICY.
KaiGai Kohei <kaigai@kaigai.gr.jp>

[-- Attachment #2: policy-1.22_IA64_BootPartition.patch --]
[-- Type: text/plain, Size: 825 bytes --]

--- policy-1.22/genfs_contexts	2005-01-24 14:00:41.000000000 -0500
+++ policy-1.22-ia64/genfs_contexts	2005-04-16 15:55:51.000000000 -0400
@@ -77,7 +77,9 @@
 genfscon ramfs /			system_u:object_r:ramfs_t
 
 # vfat, msdos
-genfscon vfat /				system_u:object_r:dosfs_t
+ifdef(`arch_ia64',
+`genfscon vfat /				system_u:object_r:boot_t',
+`genfscon vfat /				system_u:object_r:dosfs_t')
 genfscon msdos /			system_u:object_r:dosfs_t
 genfscon fat /				system_u:object_r:dosfs_t
 genfscon ntfs /				system_u:object_r:dosfs_t
--- policy-1.22/tunables/tunable.tun	2004-12-10 14:57:36.000000000 -0500
+++ policy-1.22-ia64/tunables/tunable.tun	2005-04-16 15:55:16.000000000 -0400
@@ -29,3 +29,6 @@
 
 # for ndc_t to be used for restart shell scripts
 dnl define(`ndc_shell_script')
+
+# for IA-64 archtecture
+dnl define(`arch_ia64')