commit: fefd27c86ea6813d3834acb8d469b984f103869e
Author: Sven Vermeulen <sven.vermeulen <AT> siphos <DOT> be>
AuthorDate: Sat Jul 11 14:41:06 2015 +0000
Commit: Sven Vermeulen <swift <AT> gentoo <DOT> org>
CommitDate: Sat Jul 11 14:41:06 2015 +0000
URL:
https://gitweb.gentoo.org/proj/hardened-refpolicy.git/commit/?id=fefd27c8
Move to list as it does not seem to be recognized
policy/modules/kernel/filesystem.te | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/policy/modules/kernel/filesystem.te
b/policy/modules/kernel/filesystem.te
index 706f4d9..840f0b2 100644
--- a/policy/modules/kernel/filesystem.te
+++ b/policy/modules/kernel/filesystem.te
@@ -22,6 +22,7 @@ sid fs gen_context(system_u:object_r:fs_t,s0)
# Use xattrs for the following filesystem types.
# Requires that a security xattr handler exist for the filesystem.
fs_use_xattr btrfs gen_context(system_u:object_r:fs_t,s0);
+fs_use_xattr ceph gen_context(system_u:object_r:fs_t,s0);
fs_use_xattr encfs gen_context(system_u:object_r:fs_t,s0);
fs_use_xattr ext2 gen_context(system_u:object_r:fs_t,s0);
fs_use_xattr ext3 gen_context(system_u:object_r:fs_t,s0);
@@ -308,7 +309,6 @@ allow filesystem_unconfined_type filesystem_type:filesystem
*;
allow filesystem_unconfined_type filesystem_type:{ dir file lnk_file sock_file
fifo_file chr_file blk_file } *;
ifdef(`distro_gentoo',`
- fs_use_xattr ceph gen_context(system_u:object_r:fs_t,s0);
# Fix bug 535986 - Mark configfs_t as file type (and mountpoint
probably as well)
files_mountpoint(configfs_t)
')
