cgroup in filesystem.

PATCH New Dominick Grift 1 participant 1 message Jun 7, 2010

Share & tools

Dominick Grift

author

2010-06-07 18:17 UTC #0 lore raw

PATCH v2 1/4 cgroup in filesystem.

Move cgroup_t declarations from kernel.te to filesystem.te Redo cgroup interfaces in filesystem.if
Add file context specification for /cgroup mountpoint to filesystem.fc

Signed-off-by Dominick Grift <[email protected]>

---
:100644 100644 b029773... 9306de6... M policy/modules/kernel/filesystem.fc
:100644 100644 a2c146b... 4052ab9... M policy/modules/kernel/filesystem.if
:100644 100644 774e0a1... cb889c3... M policy/modules/kernel/filesystem.te
:100644 100644 78fb6b2... 5b6c8b9... M policy/modules/kernel/kernel.te

 policy/modules/kernel/filesystem.fc |    2 +
 policy/modules/kernel/filesystem.if |  150 +++++++++++++++++++++++++----------
 policy/modules/kernel/filesystem.te |    6 ++
 policy/modules/kernel/kernel.te     |    9 --
 4 files changed, 116 insertions(+), 51 deletions(-)

policy/modules/kernel/filesystem.fc +2 -0

index b029773..9306de6 100644
@@ -1 +1,3 @@
 /dev/shm	-d	gen_context(system_u:object_r:tmpfs_t,s0)
+
+/cgroup		-d	gen_context(system_u:object_r:cgroup_t,s0)

policy/modules/kernel/filesystem.if +108 ~~-42~~

273 lines not on this page · raw message

policy/modules/kernel/filesystem.te +6 -0

index 774e0a1..cb889c3 100644
@@ -68,6 +68,12 @@ fs_type(capifs_t)
 files_mountpoint(capifs_t)
 genfscon capifs / gen_context(system_u:object_r:capifs_t,s0)
 
+type cgroup_t;
+fs_type(cgroup_t)
+files_type(cgroup_t)
+files_mountpoint(cgroup_t)
+genfscon cgroup / gen_context(system_u:object_r:cgroup_t,s0)
+
 type configfs_t;
 fs_type(configfs_t)
 genfscon configfs / gen_context(system_u:object_r:configfs_t,s0)

policy/modules/kernel/kernel.te +0 -9

index 78fb6b2..5b6c8b9 100644
@@ -46,15 +46,6 @@ role system_r types kernel_t;
 sid kernel gen_context(system_u:system_r:kernel_t,mls_systemhigh)
 
 #
-# cgroup fs
-#
-
-type cgroup_t;
-fs_type(cgroup_t)
-allow cgroup_t self:filesystem associate;
-genfscon cgroup / gen_context(system_u:object_r:cgroup_t,s0)
-
-#
 # DebugFS
 #

Signature · 9 lines

1.7.0.1

-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 198 bytes
Desc: not available
Url : http://oss.tresys.com/pipermail/refpolicy/attachments/20100607/f4bdc195/attachment.bin