Re: [RFC PATCH 0/9][V3] Overlayfs SELinux Support

From	Daniel J Walsh <dwalsh@redhat.com>
Newsgroups	linux.kernel
Subject	Re: [RFC PATCH 0/9][V3] Overlayfs SELinux Support
Date	2016-08-10 21:00 +0200
Message-ID	<s4GTo-n4-45@gated-at.bofh.it> (permalink)
References	<rUtE5-4my-5@gated-at.bofh.it> <rXtxU-4A4-35@gated-at.bofh.it> <s43S1-Lc-1@gated-at.bofh.it> <s4GTo-n4-47@gated-at.bofh.it> <s4GTo-n4-49@gated-at.bofh.it>
Organization	linux.* mail to news gateway

Show all headers | View raw


On 08/10/2016 08:32 AM, Paul Moore wrote:
> On Wed, Aug 10, 2016 at 5:11 AM, Miklos Szeredi <miklos@szeredi.hu> wrote:
>> On Tue, Aug 9, 2016 at 3:19 AM, Paul Moore <paul@paul-moore.com> wrote:
>>> Okay, I just merged these patches into selinux#next.  With the
>>> exception of some changes to restore the mode argument to
>>> ovl_create_or_link() and to fix some whitespace damage the patches
>>> were merged cleanly.
>> Don't need to add the back the mode argument, just use stat->mode.
> Thanks for the pointer (I'm on vacation at the moment and trying to do
> this quickly).  Since it was a merge issue, and the branch hasn't been
> pulled by Linus, I didn't bother with a new patch, I simply updated
> the existing patch from Vivek and re-pushed to selinux#next.  If you
> see anything else, please let me know.
>
> For Fedora folks, I'm currently rebuilding the COPR
> pcmoore/kernel-secnext kernel packages with this update; assuming
> there are no problems with the COPR infrastructure the kernel should
> be ready in a couple of hours.
>
> * https://copr.fedorainfracloud.org/coprs/pcmoore/kernel-secnext
>
Cool once there is a kernel with ovlerlay fs/selinux support I will run
it on my laptop and attempt
the selinux test suite, if everything goes well I will start running
docker on overlay with selinux enforcing mode.

Thread

Re: [RFC PATCH 0/9][V3] Overlayfs SELinux Support Paul Moore <paul@paul-moore.com> - 2016-08-09 03:20 +0200
  Re: [RFC PATCH 0/9][V3] Overlayfs SELinux Support Daniel J Walsh <dwalsh@redhat.com> - 2016-08-10 21:00 +0200
    Re: [RFC PATCH 0/9][V3] Overlayfs SELinux Support Daniel J Walsh <dwalsh@redhat.com> - 2016-08-11 14:40 +0200
    Re: [RFC PATCH 0/9][V3] Overlayfs SELinux Support Paul Moore <paul@paul-moore.com> - 2016-08-11 14:40 +0200
      Re: [RFC PATCH 0/9][V3] Overlayfs SELinux Support Daniel J Walsh <dwalsh@redhat.com> - 2016-08-11 16:10 +0200
  Re: [RFC PATCH 0/9][V3] Overlayfs SELinux Support Paul Moore <paul@paul-moore.com> - 2016-08-10 21:30 +0200
  Re: [RFC PATCH 0/9][V3] Overlayfs SELinux Support Miklos Szeredi <miklos@szeredi.hu> - 2016-08-10 23:40 +0200

csiph-web