2008-11-24 22:40:03

by Paul Moore

[permalink] [raw]
Subject: [refpolicy] [patch] btrfs enablement

An embedded and charset-unspecified text was scrubbed...
Name: btrfs-enable
Url: http://oss.tresys.com/pipermail/refpolicy/attachments/20081124/f9e6300b/attachment.pl


2008-11-25 15:54:41

by Paul Moore

[permalink] [raw]
Subject: [refpolicy] [patch] btrfs enablement

On Monday 24 November 2008 5:40:03 pm Paul Moore wrote:
> Jim Owens discovered that we don't currently make use of the xattr
> support in btrfs; the following patch fixes that.

It looks like I may have been a bit hasty on this policy patch as btrfs
still needs some work to play nicely with SELinux. Please do not apply
this patch just yet.

> ---
> policy/modules/kernel/filesystem.te | 1 +
> 1 file changed, 1 insertion(+)
>
> Index: refpolicy_svn_repo/policy/modules/kernel/filesystem.te
> ===================================================================
> --- refpolicy_svn_repo.orig/policy/modules/kernel/filesystem.te
> +++ refpolicy_svn_repo/policy/modules/kernel/filesystem.te
> @@ -33,6 +33,7 @@ fs_use_xattr jffs2 gen_context(system_u:
> fs_use_xattr jfs gen_context(system_u:object_r:fs_t,s0);
> fs_use_xattr lustre gen_context(system_u:object_r:fs_t,s0);
> fs_use_xattr xfs gen_context(system_u:object_r:fs_t,s0);
> +fs_use_xattr btrfs gen_context(system_u:object_r:fs_t,s0);
>
> # Use the allocating task SID to label inodes in the following
> filesystem # types, and label the filesystem itself with the
> specified context.



--
paul moore
linux @ hp