From: cpebenito@tresys.com (Christopher J. PeBenito) Date: Fri, 03 Sep 2010 10:56:54 -0400 Subject: [refpolicy] [filesystem 1/1] Do not try to relabel the contents of the /dev/shm directory. In-Reply-To: <20100903095854.GA21611@localhost.localdomain> References: <20100903095854.GA21611@localhost.localdomain> Message-ID: <4C810CB6.1030700@tresys.com> To: refpolicy@oss.tresys.com List-Id: refpolicy.oss.tresys.com On 09/03/10 05:59, Dominick Grift wrote: > Signed-off-by: Dominick Grift Merged. > --- > :100644 100644 9306de6... 7d0ef43... M policy/modules/kernel/filesystem.fc > policy/modules/kernel/filesystem.fc | 1 + > 1 files changed, 1 insertions(+), 0 deletions(-) > > diff --git a/policy/modules/kernel/filesystem.fc b/policy/modules/kernel/filesystem.fc > index 9306de6..7d0ef43 100644 > --- a/policy/modules/kernel/filesystem.fc > +++ b/policy/modules/kernel/filesystem.fc > @@ -1,3 +1,4 @@ > /dev/shm -d gen_context(system_u:object_r:tmpfs_t,s0) > +/dev/shm/.* <> > > /cgroup -d gen_context(system_u:object_r:cgroup_t,s0) -- Chris PeBenito Tresys Technology, LLC www.tresys.com | oss.tresys.com