From f824120b6dca3020da43814c376c6de5a1284353 Mon Sep 17 00:00:00 2001 From: Luis Ressel Date: Sat, 15 Feb 2014 13:24:55 +0100 Subject: [PATCH] Use xattr-labeling for squashfs. This is taken from the Fedora policy (authors: Dan Walsh, Miroslav Grepl) and dates back to 2011 there. --- policy/modules/kernel/filesystem.te | 8 ++------ 1 file changed, 2 insertions(+), 6 deletions(-) diff --git a/policy/modules/kernel/filesystem.te b/policy/modules/kernel/filesystem.te index e7d173844..aaf0506a7 100644 --- a/policy/modules/kernel/filesystem.te +++ b/policy/modules/kernel/filesystem.te @@ -1,4 +1,4 @@ -policy_module(filesystem, 1.17.2) +policy_module(filesystem, 1.17.3) ######################################## # @@ -32,6 +32,7 @@ fs_use_xattr gpfs gen_context(system_u:object_r:fs_t,s0); fs_use_xattr jffs2 gen_context(system_u:object_r:fs_t,s0); fs_use_xattr jfs gen_context(system_u:object_r:fs_t,s0); fs_use_xattr lustre gen_context(system_u:object_r:fs_t,s0); +fs_use_xattr squashfs gen_context(system_u:object_r:fs_t,s0); fs_use_xattr xfs gen_context(system_u:object_r:fs_t,s0); fs_use_xattr zfs gen_context(system_u:object_r:fs_t,s0); @@ -150,11 +151,6 @@ fs_type(spufs_t) genfscon spufs / gen_context(system_u:object_r:spufs_t,s0) files_mountpoint(spufs_t) -type squash_t; -fs_type(squash_t) -genfscon squash / gen_context(system_u:object_r:squash_t,s0) -files_mountpoint(squash_t) - type sysv_t; fs_noxattr_type(sysv_t) files_mountpoint(sysv_t)