On Thu, Jan 05, 2023 at 05:30:20PM +0100, Peter Krempa wrote: > Unfortunately unlike with DAC we can't simply ignore labelling for the > FD and it also influences the on-disk state. > > Thus we need to relabel the FD and we also store the existing label in > cases when the user will request best-effort label replacement. > > Signed-off-by: Peter Krempa <pkrempa@xxxxxxxxxx> > --- > src/conf/storage_source_conf.c | 1 + > src/conf/storage_source_conf.h | 3 +++ > src/security/security_selinux.c | 32 +++++++++++++++++++++++++++++++- > 3 files changed, 35 insertions(+), 1 deletion(-) Reviewed-by: Pavel Hrdina <phrdina@xxxxxxxxxx>
Attachment:
signature.asc
Description: PGP signature