Re: problems with tmpfs and relabeling

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



On Fri, 2006-04-21 at 07:51 -0400, Stephen Smalley wrote:
> On Thu, 2006-04-20 at 14:38 -0400, Bill Nottingham wrote:
> Possibly stupid question:  Will files be created dynamically in these
> tmpfs mounts at runtime?  Do you expect them to follow the traditional
> inherit-from-parent-directory behavior you get from ext3?  

Sorry, not enough caffeine here.  They already do follow that behavior
(via inode_init_security hook call from tmpfs).  Only problem here is
getting the right label on the root directory inode in the first place,
which likely just requires allowing restorecon to fix it up, as is done
for /dev as well.  This does suggest however that a rootcontext= option
to mount would be helpful.

-- 
Stephen Smalley
National Security Agency

--
fedora-selinux-list mailing list
fedora-selinux-list@xxxxxxxxxx
https://www.redhat.com/mailman/listinfo/fedora-selinux-list

[Index of Archives]     [Fedora Users]     [Fedora Desktop]     [Big List of Linux Books]     [Yosemite News]     [Yosemite Campsites]     [KDE Users]     [Gnome Users]

  Powered by Linux