c23353bcd8
Bump module versions for release.
2015-12-08 09:53:02 -05:00
17694adc7b
Module version bump for systemd additions.
2015-10-23 14:53:14 -04:00
4d28cb714f
Module version bump for patches from Jason Zaman/Matthias Dahl.
2015-10-12 09:31:18 -04:00
b3a95b4aeb
Add overlayfs as an XATTR capable fs
...
The module is called "overlay" in the kernel
2015-10-12 09:13:53 -04:00
468185f5f7
Bump module versions for release.
2014-12-03 13:37:38 -05:00
0735f2ca4a
Module version bump for misc fixes from Sven Vermeulen.
2014-12-02 10:29:59 -05:00
84fa2ab1f2
Mark f2fs as a SELinux capable file system
...
Since Linux kernel 3.11, F2FS supports XATTR and the security namespace.
See commit
https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=8ae8f1627f39bae505b90cade50cd8a911b8bda6
2014-12-02 09:16:05 -05:00
16bc3a454f
Module version bumps for fc fixes from Nicolas Iooss.
2014-04-21 10:37:44 -04:00
fbae5870d9
Module version bump for fixes from Laurent Bigonville.
2014-04-21 09:24:28 -04:00
b87c815629
Allow hugetlbfs_t to be associated to /dev
...
Even if there is not FHS provision for this, systemd is using
/dev/hugepages to mount the hugetlbfs fs by default.
The needed file contexts are already present
2014-04-21 09:08:38 -04:00
3b697dbb25
Module version bump for 2 patch sets from Laurent Bigonville.
...
* xattrfs attribute
* Misc Debian fixes
2014-04-11 11:21:03 -04:00
b1aee4c811
Associate the new xattrfs attribute to fs_t and some pseudo-fs
...
Associate the new xattrfs attribute to fs_t and the pseudo filesystems
that we know support xattr
This patch adds the attribute to the following (pseudo) filesystems
- device_t
- devpts_t
- fs_t
- hugetlbfs
- sysfs_t
- tmpfs_t
2014-04-11 09:08:19 -04:00
408549f8d3
Create new xattrfs attribute and fs_getattr_all_xattr_fs() interface
...
Create a new attribute and fs_getattr_all_xattr_fs() interface that will
be used for all the filesystems that support xattr
2014-04-11 09:08:19 -04:00
10ff4d0fa3
Bump module versions for release.
2014-03-11 08:16:57 -04:00
f824120b6d
Use xattr-labeling for squashfs.
...
This is taken from the Fedora policy (authors: Dan Walsh, Miroslav
Grepl) and dates back to 2011 there.
2014-02-15 14:34:10 -05:00
0b1efe5612
Module version bump for tmpfs associate to device_t from Dominick Grift.
2013-09-26 08:48:48 -04:00
e3072cb7bf
filesystem: associate tmpfs_t (shm) to device_t (devtmpfs) file systems
...
Signed-off-by: Dominick Grift <dominick.grift@gmail.com>
2013-09-26 08:46:36 -04:00
951462610d
Module version bump for pstore filesystem support from Dominick Grift.
2013-09-23 14:41:03 -04:00
bf1ab85c1f
Initial pstore support
...
Generic interface to platform dependent persistent storage
https://www.kernel.org/doc/Documentation/ABI/testing/pstore
This basically works pretty much the same as cgroup file systems from a
SELinux perspective
Make sure that the installed /sys/fs/pstore directory is labeled
properly so that the pstore file system can be mounted on that
I also removed the files_type() calls as they are duplicate (it is
already called in files_mountpoint)
Signed-off-by: Dominick Grift <dominick.grift@gmail.com>
2013-09-23 14:31:20 -04:00
d174521a64
Bump module versions for release.
2013-04-24 16:14:52 -04:00
fd569471c3
Module version bump for Debian updates from Laurent Bigonville.
2013-01-23 07:23:52 -05:00
e0f7ab0a8a
Module version bump for zfs labeling from Matthew Thode.
2012-12-07 13:23:41 -05:00
94c2ae8771
Implement zfs support
...
This is an OpenPGP/MIME signed message (RFC 2440 and 3156)
Just adding zfs to the list of defined filesystems in filesystem.te
Signed-off-by: Matthew Thode <mthode@mthode.org>
2012-12-07 13:07:15 -05:00
104456aa17
Module version bump for interfaces used by virt from Dominick Grift.
2012-10-30 14:17:25 -04:00
3516535aa6
Bump module versions for release.
2012-07-25 14:33:06 -04:00
4f24b1841c
Add optional name for kernel and system filetrans interfaces.
2012-05-10 09:53:45 -04:00
aa4dad379b
Module version bump for release.
2011-07-26 08:11:01 -04:00
9ec9808df5
Pull in cgroup changes from Fedora policy, in particular to handle systemd usage.
2011-04-29 13:22:47 -04:00
e541d13ae5
Pull in additional kernel layer Fedora policy changes.
2011-04-14 10:05:56 -04:00
ed17ee5394
Pull in additional changes in kernel layer from Fedora.
2011-03-31 09:49:01 -04:00
f940ca9db6
Remove eventpollfs_t.
...
Eventpollfs was changed to task SID in 2006. Remove the dead type.
2011-03-31 08:52:07 -04:00
826d014241
Bump module versions for release.
2010-12-13 09:12:22 -05:00
52f38d23c9
Module version bump for Chris Richards' mount patchset.
2010-11-11 09:48:01 -05:00
28d96f0e39
Module version bumps for b7ceb34 5675107 e411968 eca7eb3.
2010-09-03 13:09:40 -04:00
76a9fe96e4
Module version bumps and changelog for devtmpfs patchset.
2010-08-25 11:19:27 -04:00
d6e1ef29cd
Move devtmpfs to devices from filesystem
...
Move devtmpfs to devices module (remove from filesystem module)
Make device_t a filesystem
Add interface for associating types with device_t filesystem (dev_associate)
Call dev_associate from dev_filetrans
Allow all device nodes associate with device_t filesystem
Remove dev_tmpfs_filetrans_dev from kernel_t
Remove fs_associate_tmpfs(initctl_t) - redundant, it was in dev_filetrans, now in dev_associate
Mounton interface, to allow the kernel to mounton device_t
Signed-off-by: Jeremy Solt <jsolt@tresys.com>
2010-08-25 11:01:22 -04:00
eab2cc89b4
Slocate patch from Dan Walsh.
...
Locate attempts to look at network sate and does getattr on all blk/chr
and noxattr symlinks.
2010-06-22 09:58:14 -04:00
48f99a81c0
Whitespace change: drop unnecessary blank line at the start of .te files.
2010-06-10 08:16:35 -04:00
c0c635b3f3
cgroup in filesystem.
...
Move cgroup_t declarations from kernel.te to filesystem.te
Redo cgroup interfaces in filesystem.if
Add file context specification for /cgroup mountpoint to filesystem.fc
Signed-off-by: Dominick Grift <domg472@gmail.com>
Signed-off-by: Chris PeBenito <cpebenito@tresys.com>
2010-06-08 08:38:18 -04:00
29af4c13e7
Bump module versions for release.
2010-05-24 15:32:01 -04:00
e399e3abea
Add devtmpfs labeling.
2010-04-07 08:55:33 -04:00
7af0e9bc95
Filesystem patch from Dan Walsh.
2010-03-12 11:40:59 -05:00
f4b9dc3b00
Filesystem patch from Dan Walsh.
2009-11-23 13:46:51 -05:00
9570b28801
module version number bump for release 2.20090730 that was mistakenly omitted.
2009-08-05 10:59:21 -04:00
731008ad85
trunk: 2 patches from dan.
2009-06-08 17:18:26 +00:00
c45fdad85b
trunk: filesystem patch from dan.
2009-03-04 15:53:07 +00:00
156204a385
trunk: Drop write permission from fs_read_rpc_sockets().
2009-02-24 20:00:15 +00:00
805f34ed09
trunk: btrfs from Paul Moore.
2009-01-30 13:44:14 +00:00
5d4f4b5375
trunk: bump version numbers for release.
2008-10-14 15:46:36 +00:00
770c015f88
trunk: 2 patches from dan.
2008-08-14 15:10:41 +00:00
Chris PeBenito
Jason Zaman
Sven Vermeulen
Laurent Bigonville
Luis Ressel
Dominick Grift
Matthew Thode
Chris PeBenito
Jeremy Solt
Dominick Grift