Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]
Groups > linux.kernel > #1577736
| From | Paul Moore <paul@paul-moore.com> |
|---|---|
| Newsgroups | linux.kernel |
| Subject | Re: [PATCH] security: selinux: allow per-file labeling for cgroupfs |
| Date | 2017-02-09 17:20 +0100 |
| Message-ID | <t8ZBT-8mq-11@gated-at.bofh.it> (permalink) |
| References | <t8Zsd-8j1-11@gated-at.bofh.it> |
| Organization | linux.* mail to news gateway |
On Thu, Feb 9, 2017 at 11:02 AM, Antonio Murdaca <amurdaca@redhat.com> wrote: > From: Antonio Murdaca <runcom@redhat.com> > > This patch allows genfscon per-file labeling for cgroupfs. For instance, > this allows to label the "release_agent" file within each > cgroup mount and limit writes to it. > > Signed-off-by: Antonio Murdaca <amurdaca@redhat.com> > --- > security/selinux/hooks.c | 2 ++ > 1 file changed, 2 insertions(+) This was already merged ... ? * https://marc.info/?l=selinux&m=148652458620202&w=2 > diff --git a/security/selinux/hooks.c b/security/selinux/hooks.c > index 9a8f12f..5a3138e 100644 > --- a/security/selinux/hooks.c > +++ b/security/selinux/hooks.c > @@ -808,6 +808,8 @@ static int selinux_set_mnt_opts(struct super_block *sb, > > if (!strcmp(sb->s_type->name, "debugfs") || > !strcmp(sb->s_type->name, "sysfs") || > + !strcmp(sb->s_type->name, "cgroup") || > + !strcmp(sb->s_type->name, "cgroup2") || > !strcmp(sb->s_type->name, "pstore")) > sbsec->flags |= SE_SBGENFS; > > -- > 2.9.3 -- paul moore www.paul-moore.com
Back to linux.kernel | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread
[PATCH] security: selinux: allow per-file labeling for cgroupfs Antonio Murdaca <amurdaca@redhat.com> - 2017-02-09 17:10 +0100
Re: [PATCH] security: selinux: allow per-file labeling for cgroupfs Paul Moore <paul@paul-moore.com> - 2017-02-09 17:20 +0100
Re: [PATCH] security: selinux: allow per-file labeling for cgroupfs Paul Moore <paul@paul-moore.com> - 2017-02-09 20:30 +0100
Re: [PATCH] security: selinux: allow per-file labeling for cgroupfs Paul Moore <paul@paul-moore.com> - 2017-02-10 00:10 +0100
Re: [PATCH] security: selinux: allow per-file labeling for cgroupfs Daniel J Walsh <dwalsh@redhat.com> - 2017-02-11 00:10 +0100
csiph-web