From: cpebenito@tresys.com (Christopher J. PeBenito)
Date: Tue, 2 Feb 2016 09:26:15 -0500
Subject: [refpolicy] [PATCH] Label /sys/kernel/debug/tracing filesystem
In-Reply-To: <1454160121-30685-1-git-send-email-nicolas.iooss@m4x.org>
References: <1454160121-30685-1-git-send-email-nicolas.iooss@m4x.org>
Message-ID: <56B0BC87.2040308@tresys.com>
To: refpolicy@oss.tresys.com
List-Id: refpolicy.oss.tresys.com

On 1/30/2016 8:22 AM, Nicolas Iooss wrote:
> tracefs filesystem is automounted in /sys/kernel/debug/tracing directory
> since Linux 4.1.  Label this filesystem properly.

Merged.


> Linux commit:
> https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=f76180bc07abc399977bfbe8c43bf58c4570e893
> ---
>  policy/modules/kernel/filesystem.te | 4 ++++
>  1 file changed, 4 insertions(+)
> 
> diff --git a/policy/modules/kernel/filesystem.te b/policy/modules/kernel/filesystem.te
> index 1eb919388ed3..57b338e0c78b 100644
> --- a/policy/modules/kernel/filesystem.te
> +++ b/policy/modules/kernel/filesystem.te
> @@ -165,6 +165,10 @@ files_mountpoint(sysv_t)
>  genfscon sysv / gen_context(system_u:object_r:sysv_t,s0)
>  genfscon v7 / gen_context(system_u:object_r:sysv_t,s0)
>  
> +type tracefs_t;
> +fs_type(tracefs_t)
> +genfscon tracefs / gen_context(system_u:object_r:tracefs_t,s0)
> +
>  type vmblock_t;
>  fs_noxattr_type(vmblock_t)
>  files_mountpoint(vmblock_t)
> 


-- 
Chris PeBenito
Tresys Technology, LLC
www.tresys.com | oss.tresys.com