From: aranea@aixah.de (Luis Ressel)
Date: Wed, 29 Jan 2014 23:45:09 +0100
Subject: [refpolicy] Support loopback mounts
Message-ID: <1391035512-25441-1-git-send-email-aranea@aixah.de>
To: refpolicy@oss.tresys.com
List-Id: refpolicy.oss.tresys.com

Hello,

currently refpolicy seems not to support loopback mounts (mounts of ordinary
files instead of block devices, for example used by squashfs). There's the type
mount_loopback_t, but the currently granted permissions don't suffice.

The first patch isn't strictly neccessary, however it's useful for my
application scenario, might also be useful for others and doesn't harm security.
The neccessary permissions are added by the second and the third patch.


Regards,
Luis Ressel