selinux-policy/policy/modules/kernel/filesystem.fc

/dev/shm	-d	gen_context(system_u:object_r:tmpfs_t,s0)
/dev/shm/.*		<<none>>

/cgroup(/.*)? 	 	gen_context(system_u:object_r:cgroup_t,s0)
/sys/fs/cgroup(/.*)?  	<<none>>
Filesystem patch from Dan Walsh. 2009-11-23 18:16:28 +00:00			`/dev/shm -d gen_context(system_u:object_r:tmpfs_t,s0)`
Do not try to relabel the contents of the /dev/shm directory. Signed-off-by: Dominick Grift <domg472@gmail.com> 2010-09-03 09:59:00 +00:00			`/dev/shm/.* <<none>>`
cgroup in filesystem. Move cgroup_t declarations from kernel.te to filesystem.te Redo cgroup interfaces in filesystem.if Add file context specification for /cgroup mountpoint to filesystem.fc Signed-off-by: Dominick Grift <domg472@gmail.com> Signed-off-by: Chris PeBenito <cpebenito@tresys.com> 2010-06-07 18:17:14 +00:00
UPdate for f14 policy 2010-08-26 13:41:21 +00:00			`/cgroup(/.*)? gen_context(system_u:object_r:cgroup_t,s0)`
define /sys/fs/cgroup as a <<none>> file system 2010-09-01 14:12:53 +00:00			`/sys/fs/cgroup(/.*)? <<none>>`