rpms/selinux-policy
7
0
Fork 0
Code Issues Pull Requests Releases Activity
582d2c5d2c
selinux-policy/policy/modules/kernel/filesystem.fc

12 lines
341 B
Plaintext
Raw Normal View History

Filesystem patch from Dan Walsh.
2009-11-23 18:16:28 +00:00
/dev/shm -d gen_context(system_u:object_r:tmpfs_t,s0)
Do not try to relabel the contents of the /dev/shm directory. Signed-off-by: Dominick Grift <domg472@gmail.com>
2010-09-03 09:59:00 +00:00
/dev/shm/.* <<none>>
cgroup in filesystem. Move cgroup_t declarations from kernel.te to filesystem.te Redo cgroup interfaces in filesystem.if Add file context specification for /cgroup mountpoint to filesystem.fc Signed-off-by: Dominick Grift <domg472@gmail.com> Signed-off-by: Chris PeBenito <cpebenito@tresys.com>
2010-06-07 18:17:14 +00:00
Merge with upsteam
2010-09-03 21:19:55 +00:00
/cgroup -d gen_context(system_u:object_r:cgroup_t,s0)
/cgroup/.* <<none>>
Allow iptables to read shorewall tmp files Change chfn and passwd to use auth_use_pam so they can send dbus messages to fprintd label vlc as an execmem_exec_t Lots of fixes for mozilla_plugin to run google vidio chat Allow telepath_msn to execute ldconfig and its own tmp files Fix labels on hugepages Allow mdadm to read files on /dev Remove permissive domains and change back to unconfined Allow freshclam to execute shell and bin_t Allow devicekit_power to transition to dhcpc Add boolean to allow icecast to connect to any port
2010-09-07 20:23:09 +00:00
/sys/fs/cgroup -d gen_context(system_u:object_r:cgroup_t,s0)
Merge with upsteam
2010-09-03 21:19:55 +00:00
/sys/fs/cgroup(/.*)? <<none>>
Allow iptables to read shorewall tmp files Change chfn and passwd to use auth_use_pam so they can send dbus messages to fprintd label vlc as an execmem_exec_t Lots of fixes for mozilla_plugin to run google vidio chat Allow telepath_msn to execute ldconfig and its own tmp files Fix labels on hugepages Allow mdadm to read files on /dev Remove permissive domains and change back to unconfined Allow freshclam to execute shell and bin_t Allow devicekit_power to transition to dhcpc Add boolean to allow icecast to connect to any port
2010-09-07 20:23:09 +00:00
/dev/hugepages -d gen_context(system_u:object_r:hugetlbfs_t,s0)
/dev/hugepages(/.*)? <<none>>
Reference in New Issue Copy Permalink