RepoMirrors
/
selinux-refpolicy
mirror of https://github.com/SELinuxProject/refpolicy
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Initial pstore support 

Generic interface to platform dependent persistent storage
https://www.kernel.org/doc/Documentation/ABI/testing/pstore

This basically works pretty much the same as cgroup file systems from a
SELinux perspective

Make sure that the installed /sys/fs/pstore directory is labeled
properly so that the pstore file system can be mounted on that

I also removed the files_type() calls as they are duplicate (it is
already called in files_mountpoint)

Signed-off-by: Dominick Grift <dominick.grift@gmail.com>
This commit is contained in:
Dominick Grift 2013-09-11 10:53:08 +02:00 committed by Chris PeBenito
parent 36e088fa43
commit bf1ab85c1f
2 changed files with 12 additions and 5 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

8
policy/modules/kernel/filesystem.fc
View File

@ -11,9 +11,11 @@
/lib/udev/devices/shm -d gen_context(system_u:object_r:tmpfs_t,s0) /lib/udev/devices/shm -d gen_context(system_u:object_r:tmpfs_t,s0)
/lib/udev/devices/shm/.* <<none>> /lib/udev/devices/shm/.* <<none>>
# for systemd systems: /sys/fs/cgroup -d gen_context(system_u:object_r:cgroup_t,s0)
/sys/fs/cgroup -d gen_context(system_u:object_r:cgroup_t,s0) /sys/fs/cgroup/.* <<none>>
/sys/fs/cgroup/.* <<none>>
/sys/fs/pstore -d gen_context(system_u:object_r:pstore_t,s0)
/sys/fs/pstore/.* <<none>>
ifdef(`distro_debian',` ifdef(`distro_debian',`
/var/run/shm -d gen_context(system_u:object_r:tmpfs_t,s0) /var/run/shm -d gen_context(system_u:object_r:tmpfs_t,s0)

9
policy/modules/kernel/filesystem.te
View File

@ -70,9 +70,8 @@ genfscon capifs / gen_context(system_u:object_r:capifs_t,s0)
type cgroup_t; type cgroup_t;
fs_type(cgroup_t) fs_type(cgroup_t)
files_type(cgroup_t)
files_mountpoint(cgroup_t) files_mountpoint(cgroup_t)
dev_associate_sysfs(cgroup_t) # only for systemd systems dev_associate_sysfs(cgroup_t)
genfscon cgroup / gen_context(system_u:object_r:cgroup_t,s0) genfscon cgroup / gen_context(system_u:object_r:cgroup_t,s0)
type configfs_t; type configfs_t;
@ -125,6 +124,12 @@ type oprofilefs_t;
fs_type(oprofilefs_t) fs_type(oprofilefs_t)
genfscon oprofilefs / gen_context(system_u:object_r:oprofilefs_t,s0) genfscon oprofilefs / gen_context(system_u:object_r:oprofilefs_t,s0)
type pstore_t;
fs_type(pstore_t)
files_mountpoint(pstore_t)
dev_associate_sysfs(pstore_t)
genfscon pstore / gen_context(system_u:object_r:pstore_t,s0)
type ramfs_t; type ramfs_t;
fs_type(ramfs_t) fs_type(ramfs_t)
files_mountpoint(ramfs_t) files_mountpoint(ramfs_t)