selinux-refpolicy/policy/modules/kernel/filesystem.fc

/dev/shm	-d	gen_context(system_u:object_r:tmpfs_t,s0)
/dev/shm/.*		<<none>>

/cgroup		-d	gen_context(system_u:object_r:cgroup_t,s0)

/sys/fs/cgroup(/.*)?	<<none>>
Filesystem patch from Dan Walsh. 2009-11-23 18:16:28 +00:00			`/dev/shm -d gen_context(system_u:object_r:tmpfs_t,s0)`
Do not try to relabel the contents of the /dev/shm directory. Signed-off-by: Dominick Grift <domg472@gmail.com> 2010-09-03 09:59:00 +00:00			`/dev/shm/.* <<none>>`
cgroup in filesystem. Move cgroup_t declarations from kernel.te to filesystem.te Redo cgroup interfaces in filesystem.if Add file context specification for /cgroup mountpoint to filesystem.fc Signed-off-by: Dominick Grift <domg472@gmail.com> Signed-off-by: Chris PeBenito <cpebenito@tresys.com> 2010-06-07 18:17:14 +00:00
			`/cgroup -d gen_context(system_u:object_r:cgroup_t,s0)`
Libcgroup moved the cgroup directory to /sys/fs/cgroup. Signed-off-by: Dominick Grift <domg472@gmail.com> 2010-09-03 14:25:47 +00:00
			`/sys/fs/cgroup(/.*)? <<none>>`