2014-04-16 17:33:52

by Laurent Bigonville

[permalink] [raw]
Subject: [refpolicy] [PATCH] Allow hugetlbfs_t to be associated to /dev

From: Laurent Bigonville <[email protected]>

Even if there is not FHS provision for this, systemd is using
/dev/hugepages to mount the hugetlbfs fs by default.

The needed file contexts are already present
---
policy/modules/kernel/filesystem.te | 1 +
1 file changed, 1 insertion(+)

diff --git a/policy/modules/kernel/filesystem.te b/policy/modules/kernel/filesystem.te
index e7e34bf..c8b7e26 100644
--- a/policy/modules/kernel/filesystem.te
+++ b/policy/modules/kernel/filesystem.te
@@ -98,6 +98,7 @@ type hugetlbfs_t;
fs_xattr_type(hugetlbfs_t)
files_mountpoint(hugetlbfs_t)
fs_use_trans hugetlbfs gen_context(system_u:object_r:hugetlbfs_t,s0);
+dev_associate(hugetlbfs_t)

type ibmasmfs_t;
fs_type(ibmasmfs_t)
--
1.9.2


2014-04-16 18:02:23

by Laurent Bigonville

[permalink] [raw]
Subject: [refpolicy] [PATCH v2] Allow hugetlbfs_t to be associated to /dev

From: Laurent Bigonville <[email protected]>

Even if there is not FHS provision for this, systemd is using
/dev/hugepages to mount the hugetlbfs fs by default.

The needed file contexts are already present
---
policy/modules/kernel/filesystem.te | 1 +
1 file changed, 1 insertion(+)

diff --git a/policy/modules/kernel/filesystem.te b/policy/modules/kernel/filesystem.te
index e7e34bf..7a44522 100644
--- a/policy/modules/kernel/filesystem.te
+++ b/policy/modules/kernel/filesystem.te
@@ -97,6 +97,7 @@ genfscon futexfs / gen_context(system_u:object_r:futexfs_t,s0)
type hugetlbfs_t;
fs_xattr_type(hugetlbfs_t)
files_mountpoint(hugetlbfs_t)
+dev_associate(hugetlbfs_t)
fs_use_trans hugetlbfs gen_context(system_u:object_r:hugetlbfs_t,s0);

type ibmasmfs_t;
--
1.9.2

2014-04-21 13:09:33

by cpebenito

[permalink] [raw]
Subject: [refpolicy] [PATCH v2] Allow hugetlbfs_t to be associated to /dev

On 04/16/2014 02:02 PM, Laurent Bigonville wrote:
> From: Laurent Bigonville <[email protected]>
>
> Even if there is not FHS provision for this, systemd is using
> /dev/hugepages to mount the hugetlbfs fs by default.
>
> The needed file contexts are already present
> ---
> policy/modules/kernel/filesystem.te | 1 +
> 1 file changed, 1 insertion(+)
>
> diff --git a/policy/modules/kernel/filesystem.te b/policy/modules/kernel/filesystem.te
> index e7e34bf..7a44522 100644
> --- a/policy/modules/kernel/filesystem.te
> +++ b/policy/modules/kernel/filesystem.te
> @@ -97,6 +97,7 @@ genfscon futexfs / gen_context(system_u:object_r:futexfs_t,s0)
> type hugetlbfs_t;
> fs_xattr_type(hugetlbfs_t)
> files_mountpoint(hugetlbfs_t)
> +dev_associate(hugetlbfs_t)
> fs_use_trans hugetlbfs gen_context(system_u:object_r:hugetlbfs_t,s0);
>
> type ibmasmfs_t;

Merged.

--
Chris PeBenito
Tresys Technology, LLC
http://www.tresys.com | oss.tresys.com