Implement zfs support
PATCH 1/1 Implement zfs support
Just adding zfs to the list of defined filesystems in filesystem.te
---
policy/modules/kernel/filesystem.te
1 files changed, 1 insertions(+), 0 deletions (-)
(quoted diff) +0 -0
b/policy/modules/kernel/filesystem.te
index 6bd38c8..e746ee5 100644
policy/modules/kernel/filesystem.te +1 -0
@@ -33,6 +33,7 @@ fs_use_xattr jffs2 gen_context(system_u:object_r:fs_t,s0); fs_use_xattr jfs gen_context(system_u:object_r:fs_t,s0); fs_use_xattr lustre gen_context(system_u:object_r:fs_t,s0); fs_use_xattr xfs gen_context(system_u:object_r:fs_t,s0); +fs_use_xattr zfs gen_context(system_u:object_r:fs_t,s0); # Use the allocating task SID to label inodes in the following filesystem # types, and label the filesystem itself with the specified context.
Signature · 9 lines
1.7.8.6 -------------- next part -------------- A non-text attachment was scrubbed... Name: signature.asc Type: application/pgp-signature Size: 836 bytes Desc: OpenPGP digital signature Url : http://oss.tresys.com/pipermail/refpolicy/attachments/20121127/102d5a79/attachment.bin
PATCH 1/1 Implement zfs support
Quoted 13 lines · Matthew Thode
Just adding zfs to the list of defined filesystems in filesystem.te
Signed-off-by Matthew Thode <[email protected]>---
policy/modules/kernel/filesystem.te1 files changed, 1 insertions(+), 0 deletions (-)policy/modules/kernel/filesystem.te +0
-0
policy/modules/kernel/filesystem.te fs_use_xattr jffs2 gen_context(system_u:object_r:fs_t,s0); · line 39
Quoted 7 lines
policy/modules/kernel/filesystem.te +1
-0@@ -33,6 +33,7 @@ fs_use_xattr jffs2 gen_context(system_u:object_r:fs_t,s0); fs_use_xattr jfs gen_context(system_u:object_r:fs_t,s0); fs_use_xattr lustre gen_context(system_u:object_r:fs_t,s0); fs_use_xattr xfs gen_context(system_u:object_r:fs_t,s0); +fs_use_xattr zfs gen_context(system_u:object_r:fs_t,s0); # Use the allocating task SID to label inodes in the following filesystem # types, and label the filesystem itself with the specified context.
Is the security label support in the upstream ZFS on Linux repo?
Signature · 3 lines
Chris PeBenito Tresys Technology, LLC www.tresys.com | oss.tresys.com
PATCH 1/1 Implement zfs support
Quoted 19 lines · Christopher J. PeBenito
Quoted 18 lines · Matthew Thode
Just adding zfs to the list of defined filesystems in filesystem.te
Signed-off-by Matthew Thode <[email protected]>---
policy/modules/kernel/filesystem.te1 files changed, 1 insertions(+), 0 deletions (-)policy/modules/kernel/filesystem.te +1
-0@@ -33,6 +33,7 @@ fs_use_xattr jffs2 gen_context(system_u:object_r:fs_t,s0); fs_use_xattr jfs gen_context(system_u:object_r:fs_t,s0); fs_use_xattr lustre gen_context(system_u:object_r:fs_t,s0); fs_use_xattr xfs gen_context(system_u:object_r:fs_t,s0); +fs_use_xattr zfs gen_context(system_u:object_r:fs_t,s0);
Quoted 5 lines
policy/modules/kernel/filesystem.te fs_use_xattr jffs2 gen_context(system_u:object_r:fs_t,s0); · line 39
Quoted 2 lines
policy/modules/kernel/filesystem.te +0
-0# Use the allocating task SID to label inodes in the following filesystem # types, and label the filesystem itself with the specified context.Is the security label support in the upstream ZFS on Linux repo?
xattrs are there fully :D
xattr=sa
https://github.com/zfsonlinux/zfs/issues/671
Signature · 9 lines
-- Matthew Thode -------------- next part -------------- A non-text attachment was scrubbed... Name: signature.asc Type: application/pgp-signature Size: 836 bytes Desc: OpenPGP digital signature Url : http://oss.tresys.com/pipermail/refpolicy/attachments/20121128/790ebd30/attachment.bin
PATCH 1/1 Implement zfs support
Quoted 32 lines · Matthew Thode
Quoted 19 lines · Christopher J. PeBenito
Quoted 18 lines · Matthew Thode
Just adding zfs to the list of defined filesystems in filesystem.te
Signed-off-by Matthew Thode <[email protected]>---
policy/modules/kernel/filesystem.te1 files changed, 1 insertions(+), 0 deletions (-)policy/modules/kernel/filesystem.te +1
-0@@ -33,6 +33,7 @@ fs_use_xattr jffs2 gen_context(system_u:object_r:fs_t,s0); fs_use_xattr jfs gen_context(system_u:object_r:fs_t,s0); fs_use_xattr lustre gen_context(system_u:object_r:fs_t,s0); fs_use_xattr xfs gen_context(system_u:object_r:fs_t,s0); +fs_use_xattr zfs gen_context(system_u:object_r:fs_t,s0);Quoted 5 lines
policy/modules/kernel/filesystem.te fs_use_xattr jffs2 gen_context(system_u:object_r:fs_t,s0); · line 39
Quoted 2 lines
policy/modules/kernel/filesystem.te +0
-0# Use the allocating task SID to label inodes in the following filesystem # types, and label the filesystem itself with the specified context.Is the security label support in the upstream ZFS on Linux repo?
xattrs are there fully :D
Quoted 5 lines
_______________________________________________
refpolicy mailing list
refpolicy at oss.tresys.com
http://oss.tresys.com/mailman/listinfo/refpolicy
any update on this?
Signature · 9 lines
-- Matthew Thode -------------- next part -------------- A non-text attachment was scrubbed... Name: signature.asc Type: application/pgp-signature Size: 836 bytes Desc: OpenPGP digital signature Url : http://oss.tresys.com/pipermail/refpolicy/attachments/20121207/753337e1/attachment-0001.bin
PATCH 1/1 Implement zfs support
Quoted 26 lines · Matthew Thode
Quoted 25 lines · Matthew Thode
Quoted 24 lines · Christopher J. PeBenito
Quoted 13 lines · Matthew Thode
Just adding zfs to the list of defined filesystems in filesystem.te
Signed-off-by Matthew Thode <[email protected]>---
policy/modules/kernel/filesystem.te1 files changed, 1 insertions(+), 0 deletions (-)policy/modules/kernel/filesystem.te +0
-0policy/modules/kernel/filesystem.te fs_use_xattr jffs2 gen_context(system_u:object_r:fs_t,s0); · line 39
Quoted 7 lines
policy/modules/kernel/filesystem.te +1
-0@@ -33,6 +33,7 @@ fs_use_xattr jffs2 gen_context(system_u:object_r:fs_t,s0); fs_use_xattr jfs gen_context(system_u:object_r:fs_t,s0); fs_use_xattr lustre gen_context(system_u:object_r:fs_t,s0); fs_use_xattr xfs gen_context(system_u:object_r:fs_t,s0); +fs_use_xattr zfs gen_context(system_u:object_r:fs_t,s0); # Use the allocating task SID to label inodes in the following filesystem # types, and label the filesystem itself with the specified context.Is the security label support in the upstream ZFS on Linux repo?
Quoted 6 lines
Quoted 5 lines
xattrs are there fully :D
any update on this?
Its fine; I just forgot to merge it. Its in there now.
Signature · 4 lines
Chris PeBenito <[email protected]> Developer, Hardened Gentoo Linux