Russell Coker a4b8f773c1 getattr on unlabeled blk devs ... The following has been in my tree for a few years. It allows initrc_t to stat devices early in the boot process. >From ad46ce856a1a780cf6c3a0bb741794019e03edc2 Mon Sep 17 00:00:00 2001 From: Dominick Grift <dominick.grift@gmail.com> Date: Sat, 9 Nov 2013 10:45:09 +0100 Subject: [PATCH] init: startpar (initrc_t) gets attributes of /dev/dm-0 (device_t) early on boot, soon later the node context is properly reset (debian only) init: startpar (initrc_t) gets attributes of /proc/kcore file Signed-off-by: Dominick Grift <dominick.grift@gmail.com>		2016-08-06 15:57:52 -04:00
..
flask	Add the validate_trans access vector to the security class	2016-05-02 08:41:07 -04:00
modules	getattr on unlabeled blk devs	2016-08-06 15:57:52 -04:00
support	Update netlink socket classes.	2015-05-22 08:29:03 -04:00
constraints	Update netlink socket classes.	2015-05-22 08:29:03 -04:00
context_defaults	Fix error in default_user example.	2014-04-28 10:19:22 -04:00
global_booleans	Move secure_mode_policyload into selinux module as that is the only place it is used.	2011-09-26 09:53:23 -04:00
global_tunables	user_udp_server tunable	2016-08-02 19:44:16 -04:00
mcs	Implement mcs_constrained_type	2012-11-28 16:12:25 -05:00
mls	Add new MLS attribute to allow relabeling objects higher than system low. This exception is needed for package managers when processing sensitive data.	2016-07-27 18:32:24 -04:00
policy_capabilities	Add always_check_network policy capability.	2015-01-27 17:25:36 -05:00
users	Apply direct_initrc to unconfined_r:unconfined_t	2014-01-16 15:27:18 -05:00