* [refpolicy] [PATCH] Allow hugetlbfs_t to be associated to /dev
@ 2014-04-16 17:33 Laurent Bigonville
2014-04-16 18:02 ` [refpolicy] [PATCH v2] " Laurent Bigonville
0 siblings, 1 reply; 3+ messages in thread
From: Laurent Bigonville @ 2014-04-16 17:33 UTC (permalink / raw)
To: refpolicy
From: Laurent Bigonville <bigon@bigon.be>
Even if there is not FHS provision for this, systemd is using
/dev/hugepages to mount the hugetlbfs fs by default.
The needed file contexts are already present
---
policy/modules/kernel/filesystem.te | 1 +
1 file changed, 1 insertion(+)
diff --git a/policy/modules/kernel/filesystem.te b/policy/modules/kernel/filesystem.te
index e7e34bf..c8b7e26 100644
--- a/policy/modules/kernel/filesystem.te
+++ b/policy/modules/kernel/filesystem.te
@@ -98,6 +98,7 @@ type hugetlbfs_t;
fs_xattr_type(hugetlbfs_t)
files_mountpoint(hugetlbfs_t)
fs_use_trans hugetlbfs gen_context(system_u:object_r:hugetlbfs_t,s0);
+dev_associate(hugetlbfs_t)
type ibmasmfs_t;
fs_type(ibmasmfs_t)
--
1.9.2
^ permalink raw reply related [flat|nested] 3+ messages in thread
* [refpolicy] [PATCH v2] Allow hugetlbfs_t to be associated to /dev
2014-04-16 17:33 [refpolicy] [PATCH] Allow hugetlbfs_t to be associated to /dev Laurent Bigonville
@ 2014-04-16 18:02 ` Laurent Bigonville
2014-04-21 13:09 ` Christopher J. PeBenito
0 siblings, 1 reply; 3+ messages in thread
From: Laurent Bigonville @ 2014-04-16 18:02 UTC (permalink / raw)
To: refpolicy
From: Laurent Bigonville <bigon@bigon.be>
Even if there is not FHS provision for this, systemd is using
/dev/hugepages to mount the hugetlbfs fs by default.
The needed file contexts are already present
---
policy/modules/kernel/filesystem.te | 1 +
1 file changed, 1 insertion(+)
diff --git a/policy/modules/kernel/filesystem.te b/policy/modules/kernel/filesystem.te
index e7e34bf..7a44522 100644
--- a/policy/modules/kernel/filesystem.te
+++ b/policy/modules/kernel/filesystem.te
@@ -97,6 +97,7 @@ genfscon futexfs / gen_context(system_u:object_r:futexfs_t,s0)
type hugetlbfs_t;
fs_xattr_type(hugetlbfs_t)
files_mountpoint(hugetlbfs_t)
+dev_associate(hugetlbfs_t)
fs_use_trans hugetlbfs gen_context(system_u:object_r:hugetlbfs_t,s0);
type ibmasmfs_t;
--
1.9.2
^ permalink raw reply related [flat|nested] 3+ messages in thread
* [refpolicy] [PATCH v2] Allow hugetlbfs_t to be associated to /dev
2014-04-16 18:02 ` [refpolicy] [PATCH v2] " Laurent Bigonville
@ 2014-04-21 13:09 ` Christopher J. PeBenito
0 siblings, 0 replies; 3+ messages in thread
From: Christopher J. PeBenito @ 2014-04-21 13:09 UTC (permalink / raw)
To: refpolicy
On 04/16/2014 02:02 PM, Laurent Bigonville wrote:
> From: Laurent Bigonville <bigon@bigon.be>
>
> Even if there is not FHS provision for this, systemd is using
> /dev/hugepages to mount the hugetlbfs fs by default.
>
> The needed file contexts are already present
> ---
> policy/modules/kernel/filesystem.te | 1 +
> 1 file changed, 1 insertion(+)
>
> diff --git a/policy/modules/kernel/filesystem.te b/policy/modules/kernel/filesystem.te
> index e7e34bf..7a44522 100644
> --- a/policy/modules/kernel/filesystem.te
> +++ b/policy/modules/kernel/filesystem.te
> @@ -97,6 +97,7 @@ genfscon futexfs / gen_context(system_u:object_r:futexfs_t,s0)
> type hugetlbfs_t;
> fs_xattr_type(hugetlbfs_t)
> files_mountpoint(hugetlbfs_t)
> +dev_associate(hugetlbfs_t)
> fs_use_trans hugetlbfs gen_context(system_u:object_r:hugetlbfs_t,s0);
>
> type ibmasmfs_t;
Merged.
--
Chris PeBenito
Tresys Technology, LLC
www.tresys.com | oss.tresys.com
^ permalink raw reply [flat|nested] 3+ messages in thread
end of thread, other threads:[~2014-04-21 13:09 UTC | newest]
Thread overview: 3+ messages (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2014-04-16 17:33 [refpolicy] [PATCH] Allow hugetlbfs_t to be associated to /dev Laurent Bigonville
2014-04-16 18:02 ` [refpolicy] [PATCH v2] " Laurent Bigonville
2014-04-21 13:09 ` Christopher J. PeBenito
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.