On Mon, 2018-01-15 at 08:27 -0800, Christoph Hellwig wrote: > On Mon, Jan 15, 2018 at 11:20:36AM -0500, Mimi Zohar wrote: > > Some filesystems do not export the filesystem's magic number, as it is > > considered internal, private data. In other cases, the policy rule > > needs to identify a specifically mounted filesystem (eg. rootfs). > > No, it doesn't. Policies based on a file system type are complete and > utterly bogus. rootfs should not be treated any different from other > file systems. rootfs IS different than other filesystems, as other filesystems uniquely identify the underlying filesystem type. rootfs can be a ramfs or tmpfs filesystem. Only tmpfs supports xattrs. Mimi
