On Mon, Jan 15, 2018 at 11:20:36AM -0500, Mimi Zohar wrote: > Some filesystems do not export the filesystem's magic number, as it is > considered internal, private data. In other cases, the policy rule > needs to identify a specifically mounted filesystem (eg. rootfs). No, it doesn't. Policies based on a file system type are complete and utterly bogus. rootfs should not be treated any different from other file systems.
