From: domg472@gmail.com (Dominick Grift) Date: Fri, 3 Sep 2010 11:59:00 +0200 Subject: [refpolicy] [filesystem 1/1] Do not try to relabel the contents of the /dev/shm directory. Message-ID: <20100903095854.GA21611@localhost.localdomain> To: refpolicy@oss.tresys.com List-Id: refpolicy.oss.tresys.com Signed-off-by: Dominick Grift --- :100644 100644 9306de6... 7d0ef43... M policy/modules/kernel/filesystem.fc policy/modules/kernel/filesystem.fc | 1 + 1 files changed, 1 insertions(+), 0 deletions(-) diff --git a/policy/modules/kernel/filesystem.fc b/policy/modules/kernel/filesystem.fc index 9306de6..7d0ef43 100644 --- a/policy/modules/kernel/filesystem.fc +++ b/policy/modules/kernel/filesystem.fc @@ -1,3 +1,4 @@ /dev/shm -d gen_context(system_u:object_r:tmpfs_t,s0) +/dev/shm/.* <> /cgroup -d gen_context(system_u:object_r:cgroup_t,s0) -- 1.7.2.1 -------------- next part -------------- A non-text attachment was scrubbed... Name: not available Type: application/pgp-signature Size: 198 bytes Desc: not available Url : http://oss.tresys.com/pipermail/refpolicy/attachments/20100903/d0d731d5/attachment.bin