From: cpebenito@tresys.com (Christopher J. PeBenito) Date: Wed, 23 Jan 2013 07:17:40 -0500 Subject: [refpolicy] [PATCH 09/13] Allow mount_t to set priority of kernel threads In-Reply-To: <1358026351-12955-10-git-send-email-bigon@debian.org> References: <1358026351-12955-1-git-send-email-bigon@debian.org> <1358026351-12955-10-git-send-email-bigon@debian.org> Message-ID: <50FFD4E4.4080206@tresys.com> To: refpolicy@oss.tresys.com List-Id: refpolicy.oss.tresys.com On 01/12/13 16:32, Laurent Bigonville wrote: > From: Laurent Bigonville > > --- > policy/modules/system/mount.te | 1 + > 1 file changed, 1 insertion(+) > > diff --git a/policy/modules/system/mount.te b/policy/modules/system/mount.te > index 8fcd782..7a58d79 100644 > --- a/policy/modules/system/mount.te > +++ b/policy/modules/system/mount.te > @@ -64,6 +64,7 @@ kernel_dontaudit_write_debugfs_dirs(mount_t) > kernel_dontaudit_write_proc_dirs(mount_t) > # To load binfmt_misc kernel module > kernel_request_load_module(mount_t) > +kernel_setsched(mount_t) > > # required for mount.smbfs > corecmd_exec_bin(mount_t) Any idea why this is required? -- Chris PeBenito Tresys Technology, LLC www.tresys.com | oss.tresys.com