selinux-refpolicy/policy/modules
Harry Ciao 4d8e9ffcb3 Make mount_t able to request loading kernel module.
Make the mount domain able to request kernel to load a kernel module.
Otherwise the binfmt_misc kernel module won't be properly loaded
during system booting up.

type=1400 audit(1292850971.104:4): avc:  denied  { module_request } for  pid=87 comm="mount" kmod="devtmpfs" scontext=system_u:system_r:mount_t:s0-s15:c0.c1023 tcontext=system_u:system_r:kernel_t:s15:c0.c1023 tclass=system

type=1400 audit(1292851024.844:13): avc:  denied  { module_request } for  pid=409 comm="mount" kmod="binfmt_misc" scontext=system_u:system_r:mount_t:s0-s15:c0.c1023 tcontext=system_u:system_r:kernel_t:s15:c0.c1023 tclass=system

Signed-off-by: Harry Ciao <qingtao.cao@windriver.com>
2011-01-10 10:20:21 -05:00
..
admin Bump module versions for release. 2010-12-13 09:12:22 -05:00
apps Module version bump and changelog for vlock patch from Harry Ciao. 2011-01-05 11:23:47 -05:00
kernel Bump module versions for release. 2010-12-13 09:12:22 -05:00
roles hadoop: update to CDH3 2011-01-05 09:35:40 -05:00
services Module version bump and changelog for hadoop CDH3 patchset. 2011-01-05 10:23:02 -05:00
system Make mount_t able to request loading kernel module. 2011-01-10 10:20:21 -05:00