From: cpebenito@tresys.com (Christopher J. PeBenito) Date: Fri, 29 Apr 2011 09:53:54 -0400 Subject: [refpolicy] Refpolicy status In-Reply-To: <4DBAC06E.4010106@gmail.com> References: <4DB86210.40609@tresys.com> <4DB86A84.9070308@gmail.com> <4DBABF5E.9060107@tresys.com> <4DBAC06E.4010106@gmail.com> Message-ID: <4DBAC2F2.5000106@tresys.com> To: refpolicy@oss.tresys.com List-Id: refpolicy.oss.tresys.com On 04/29/11 09:43, Dominick Grift wrote: > On 04/29/2011 03:38 PM, Christopher J. PeBenito wrote: > >> Ok, I already got the filesystem.fc merged in, but its rearranged, so it >> looks like a diff between the two trees. I'll look at the cgroup and >> cobbler modules. > > > If you decide to merge cgroup changes then keep in mind that cgroup_t > needs to associate with sysfs_t devices. (filesystem.te: > dev_associate_sysfs(cgroup_t)) > > This cgroup/sysfs change is mainly for systemd. libcgroup still > installs/uses the /cgroup by default. So this means that the /sys fc lines are for systemd systems too, right? -- Chris PeBenito Tresys Technology, LLC www.tresys.com | oss.tresys.com