Selabel/selinux support in mtd-utils for ubifs

Selabel/selinux support in mtd-utils for ubifs

[Ritesh Harjani]

Hello all,

Could anyone please help whether selinux support is fully present on 
ubifs or not?

Below are my observations:-
1. Selinux support was added in ubifs kernel via below patch
"UBIFS: Add security.* XATTR support for the UBIFS"

2. Extended attribute support was added in mtd-utils via below patch.
"mkfs.ubifs: Add extended attribute support"

With above I think that selinux could be enabled but only at the boot 
time using selinux tools.

But I could not see any support to add selinux labels/context 
information while creating ubifs.img in mtd-utils. I do see below link 
where something like above was tried but never made upstream. Could 
anyone please give pointers on whether this support is added/ or bring 
worked upon?

http://lists.infradead.org/pipermail/linux-mtd/2014-February/052136.html

Also Whether selinux labeling support can be added in the mkfs.ubifs or 
not? Do we see any issues with this?

I would like to work upon adding selinux support in mtd-utils.
I would appreciate if I could get some pointers on above queries and if 
anyone has any pointers/suggestions for this.


Regards
Ritesh

-- 
Qualcomm India Private Limited, on behalf of Qualcomm Innovation Center, 
Inc.
Qualcomm Innovation Center, Inc. is a member of Code Aurora Forum, a 
Linux Foundation Collaborative Project.

Re: Selabel/selinux support in mtd-utils for ubifs

[Richard Weinberger]

Ritesh,

Am Montag, 21. Mai 2018, 13:47:53 CEST schrieb Ritesh Harjani:
> Hello all,
> 
> Could anyone please help whether selinux support is fully present on 
> ubifs or not?
> 
> Below are my observations:-
> 1. Selinux support was added in ubifs kernel via below patch
> "UBIFS: Add security.* XATTR support for the UBIFS"
> 
> 2. Extended attribute support was added in mtd-utils via below patch.
> "mkfs.ubifs: Add extended attribute support"
> 
> With above I think that selinux could be enabled but only at the boot 
> time using selinux tools.

Yes.

> But I could not see any support to add selinux labels/context 
> information while creating ubifs.img in mtd-utils. I do see below link 
> where something like above was tried but never made upstream. Could 
> anyone please give pointers on whether this support is added/ or bring 
> worked upon?
> 
> http://lists.infradead.org/pipermail/linux-mtd/2014-February/052136.html
> 
> Also Whether selinux labeling support can be added in the mkfs.ubifs or 
> not? Do we see any issues with this?

No, just revive the patches.
In 2014 the maintainer situation was different and sadly we forgot about some
patches.
 
> I would like to work upon adding selinux support in mtd-utils.

This would be wonderful!

> I would appreciate if I could get some pointers on above queries and if 
> anyone has any pointers/suggestions for this.

Just go ahead. :-)

Thanks,
//richard

Re: Selabel/selinux support in mtd-utils for ubifs

[Ritesh Harjani]

On 5/22/2018 2:56 AM, Richard Weinberger wrote:
> Ritesh,
> 
> Am Montag, 21. Mai 2018, 13:47:53 CEST schrieb Ritesh Harjani:
>> Hello all,
>>
>> Could anyone please help whether selinux support is fully present on
>> ubifs or not?
>>
>> Below are my observations:-
>> 1. Selinux support was added in ubifs kernel via below patch
>> "UBIFS: Add security.* XATTR support for the UBIFS"
>>
>> 2. Extended attribute support was added in mtd-utils via below patch.
>> "mkfs.ubifs: Add extended attribute support"
>>
>> With above I think that selinux could be enabled but only at the boot
>> time using selinux tools.
> 
> Yes.
> 
>> But I could not see any support to add selinux labels/context
>> information while creating ubifs.img in mtd-utils. I do see below link
>> where something like above was tried but never made upstream. Could
>> anyone please give pointers on whether this support is added/ or bring
>> worked upon?
>>
>> http://lists.infradead.org/pipermail/linux-mtd/2014-February/052136.html
>>
>> Also Whether selinux labeling support can be added in the mkfs.ubifs or
>> not? Do we see any issues with this?
> 
> No, just revive the patches.
> In 2014 the maintainer situation was different and sadly we forgot about some
> patches.
>   
>> I would like to work upon adding selinux support in mtd-utils.
> 
> This would be wonderful!
> 
>> I would appreciate if I could get some pointers on above queries and if
>> anyone has any pointers/suggestions for this.
> 
> Just go ahead. :-)
Sure, thanks Richard.
I will work on this and will post the patches.


> 
> Thanks,
> //richard
> 
> ______________________________________________________
> Linux MTD discussion mailing list
> http://lists.infradead.org/mailman/listinfo/linux-mtd/
> 

-- 
Qualcomm India Private Limited, on behalf of Qualcomm Innovation Center, 
Inc.
Qualcomm Innovation Center, Inc. is a member of Code Aurora Forum, a 
Linux Foundation Collaborative Project.