From: mthode@mthode.org (Matthew Thode) Date: Wed, 28 Nov 2012 16:06:41 -0600 Subject: [refpolicy] [PATCH] Implement zfs support In-Reply-To: <50B68572.1060006@tresys.com> References: <50B4DC4E.2000108@mthode.org> <50B68572.1060006@tresys.com> Message-ID: <50B68AF1.5010404@mthode.org> To: refpolicy@oss.tresys.com List-Id: refpolicy.oss.tresys.com On 11/28/2012 03:43 PM, Christopher J. PeBenito wrote: > On 11/27/12 10:29, Matthew Thode wrote: >> Just adding zfs to the list of defined filesystems in filesystem.te >> >> Signed-off-by: Matthew Thode >> --- >> policy/modules/kernel/filesystem.te >> 1 files changed, 1 insertions(+), 0 deletions (-) >> >> diff --git a/policy/modules/kernel/filesystem.te >> b/policy/modules/kernel/filesystem.te >> index 6bd38c8..e746ee5 100644 >> --- a/policy/modules/kernel/filesystem.te >> +++ b/policy/modules/kernel/filesystem.te >> @@ -33,6 +33,7 @@ fs_use_xattr jffs2 gen_context(system_u:object_r:fs_t,s0); >> fs_use_xattr jfs gen_context(system_u:object_r:fs_t,s0); >> fs_use_xattr lustre gen_context(system_u:object_r:fs_t,s0); >> fs_use_xattr xfs gen_context(system_u:object_r:fs_t,s0); >> +fs_use_xattr zfs gen_context(system_u:object_r:fs_t,s0); >> >> # Use the allocating task SID to label inodes in the following filesystem >> # types, and label the filesystem itself with the specified context. > > Is the security label support in the upstream ZFS on Linux repo? > xattrs are there fully :D xattr=sa https://github.com/zfsonlinux/zfs/issues/671 -- -- Matthew Thode -------------- next part -------------- A non-text attachment was scrubbed... Name: signature.asc Type: application/pgp-signature Size: 836 bytes Desc: OpenPGP digital signature Url : http://oss.tresys.com/pipermail/refpolicy/attachments/20121128/790ebd30/attachment.bin