RepoMirrors
/
selinux-refpolicy
mirror of https://github.com/SELinuxProject/refpolicy
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

filesystem: add fs_use_trans for ramfs 

Enable extended attributes for inodes on ramfs filesystems, similar to
tmpfs filesystems.

For example systemd uses ramfs for service credentials[1], and xattr
support is needed for per service based labeling[2].

[1]: https://www.freedesktop.org/software/systemd/man/systemd-creds.html
[2]: https://github.com/systemd/systemd/pull/21158

Signed-off-by: Christian Göttsche <cgzones@googlemail.com>
This commit is contained in:
Christian Göttsche 2021-10-27 21:18:27 +02:00
parent 7be64d4bfa
commit 1e480c3cd6
1 changed files with 2 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
policy/modules/kernel/filesystem.te
View File

@ -155,9 +155,9 @@ dev_associate_sysfs(pstore_t)
genfscon pstore / gen_context(system_u:object_r:pstore_t,s0) genfscon pstore / gen_context(system_u:object_r:pstore_t,s0)
type ramfs_t; type ramfs_t;
fs_type(ramfs_t) fs_xattr_type(ramfs_t)
files_mountpoint(ramfs_t) files_mountpoint(ramfs_t)
genfscon ramfs / gen_context(system_u:object_r:ramfs_t,s0) fs_use_trans ramfs gen_context(system_u:object_r:ramfs_t,s0);
type romfs_t; type romfs_t;
fs_type(romfs_t) fs_type(romfs_t)