Skip to contentSkip to conversation

Add fc for /sys/fs/debug as debugfs_t

PATCH New Laurent Bigonville 2 participants 3 messages May 5, 2015 – May 6, 2015

lore
Share & tools
lore
#0 lore raw

PATCH 1/1 Add fc for /sys/fs/debug as debugfs_t

From: Laurent Bigonville <[email protected]>

---
 policy/modules/kernel/kernel.fc | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)
policy/modules/kernel/kernel.fc +1 -1
index 7be4ddf..2f8b6f1 100644
@@ -1 +1 @@
-# This module currently does not have any file contexts.
+/sys/fs/debugfs(/.*)?		gen_context(system_u:object_r:debugfs_t,s0)
Signature · 1 line
2.1.4
#1 lore raw

PATCH 1/1 Add fc for /sys/fs/debug as debugfs_t

Quoted 12 lines · Laurent Bigonville

From: Laurent Bigonville <[email protected]>

---
 policy/modules/kernel/kernel.fc | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)
policy/modules/kernel/kernel.fc +0 -0
index 7be4ddf..2f8b6f1 100644

policy/modules/kernel/kernel.fc line 1

Quoted 2 lines
policy/modules/kernel/kernel.fc +1 -1
@@ -1 +1 @@
-# This module currently does not have any file contexts.
+/sys/fs/debugfs(/.*)?		gen_context(system_u:object_r:debugfs_t,s0)

In Fedora, we have

+/sys/kernel/debug -d gen_context(system_u:object_r:debugfs_t,s0)
+/sys/kernel/debug/.* <<none>>

Signature · 3 lines
Miroslav Grepl
Software Engineering, SELinux Solutions
Red Hat, Inc.
#2 lore raw

PATCH 1/1 Add fc for /sys/fs/debug as debugfs_t

Le Tue, 05 May 2015 14:41:11 +0200,
Miroslav Grepl <[email protected]> a ?crit :

Quoted 18 lines · Laurent Bigonville
Quoted 13 lines

From: Laurent Bigonville <[email protected]>

---
 policy/modules/kernel/kernel.fc | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)
(quoted diff) +0 -0

b/policy/modules/kernel/kernel.fc index 7be4ddf..2f8b6f1 100644

policy/modules/kernel/kernel.fc +1 -1
@@ -1 +1 @@
-# This module currently does not have any file contexts.
+/sys/fs/debugfs(/.*)?
Quoted 2 lines

gen_context(system_u:object_r:debugfs_t,s0)

In Fedora, we have

Review

Quoted 2 lines
(quoted diff) +2 -0
+/sys/kernel/debug -d   gen_context(system_u:object_r:debugfs_t,s0)
+/sys/kernel/debug/.*   <<none>>

And you are actually correct I think, it's /sys/kernel and not /sys/fs ... I'll resend a patch

Laurent Bigonville