From: cpebenito@tresys.com (Christopher J. PeBenito) Date: Fri, 4 Apr 2014 15:50:21 -0400 Subject: [refpolicy] [PATCH v2 2/3] Associate the new xattrfs attribute to fs_t and some pseudo-fs In-Reply-To: <20140324144706.52b5f1e0@soldur.bigon.be> References: <1395489971-17651-1-git-send-email-bigon@debian.org> <1395489971-17651-2-git-send-email-bigon@debian.org> <20140324144706.52b5f1e0@soldur.bigon.be> Message-ID: <533F0CFD.2090009@tresys.com> To: refpolicy@oss.tresys.com List-Id: refpolicy.oss.tresys.com On 03/24/2014 09:47 AM, Laurent Bigonville wrote: > Le Sat, 22 Mar 2014 13:06:10 +0100, > Laurent Bigonville a ?crit : > > [...] >> b/policy/modules/kernel/filesystem.te index 4207e8f..a8a54d2 100644 >> --- a/policy/modules/kernel/filesystem.te >> +++ b/policy/modules/kernel/filesystem.te >> @@ -17,6 +17,7 @@ attribute xattrfs; >> # >> type fs_t; >> fs_type(fs_t) >> +typeattribute fs_t xattrfs; >> sid fs gen_context(system_u:object_r:fs_t,s0) >> >> # Use xattrs for the following filesystem types. > > This should probably be changed to use the new fs_xattr_type() of > course, or set the attribute directly as it's local. > > [...] > > I can post a v3 of the patch if you want I'd prefer to keep consistent and use a fs_xattr_type() call. -- Chris PeBenito Tresys Technology, LLC www.tresys.com | oss.tresys.com