2010-09-03 09:59:00

by domg472

Subject: [refpolicy] [filesystem 1/1] Do not try to relabel the contents of the /dev/shm directory.

Signed-off-by: Dominick Grift <[email protected]>
---
:100644 100644 9306de6... 7d0ef43... M policy/modules/kernel/filesystem.fc
policy/modules/kernel/filesystem.fc | 1 +
1 files changed, 1 insertions(+), 0 deletions(-)

diff --git a/policy/modules/kernel/filesystem.fc b/policy/modules/kernel/filesystem.fc
index 9306de6..7d0ef43 100644
--- a/policy/modules/kernel/filesystem.fc
+++ b/policy/modules/kernel/filesystem.fc
@@ -1,3 +1,4 @@
/dev/shm -d gen_context(system_u:object_r:tmpfs_t,s0)
+/dev/shm/.* <<none>>

/cgroup -d gen_context(system_u:object_r:cgroup_t,s0)
--
1.7.2.1

-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 198 bytes
Desc: not available
Url : http://oss.tresys.com/pipermail/refpolicy/attachments/20100903/d0d731d5/attachment.bin

2010-09-03 14:56:54

by cpebenito

Subject: [refpolicy] [filesystem 1/1] Do not try to relabel the contents of the /dev/shm directory.

On 09/03/10 05:59, Dominick Grift wrote:
> Signed-off-by: Dominick Grift<[email protected]>

Merged.

> ---
> :100644 100644 9306de6... 7d0ef43... M policy/modules/kernel/filesystem.fc
> policy/modules/kernel/filesystem.fc | 1 +
> 1 files changed, 1 insertions(+), 0 deletions(-)
>
> diff --git a/policy/modules/kernel/filesystem.fc b/policy/modules/kernel/filesystem.fc
> index 9306de6..7d0ef43 100644
> --- a/policy/modules/kernel/filesystem.fc
> +++ b/policy/modules/kernel/filesystem.fc
> @@ -1,3 +1,4 @@
> /dev/shm -d gen_context(system_u:object_r:tmpfs_t,s0)
> +/dev/shm/.* <<none>>
>
> /cgroup -d gen_context(system_u:object_r:cgroup_t,s0)

--
Chris PeBenito
Tresys Technology, LLC
http://www.tresys.com | oss.tresys.com