lkml.org 
[lkml]   [2010]   [Aug]   [31]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
 
Messages in this thread
    /
    SubjectRe: selinux vs devtmpfs (vs udev)
    From
    Date
    On Tue, 2010-08-31 at 21:32 +0200, Kay Sievers wrote:
    > On Tue, Aug 31, 2010 at 17:49, Harald Hoyer <harald@redhat.com> wrote:
    > > https://bugzilla.redhat.com/show_bug.cgi?id=575128#c14
    > > https://bugzilla.redhat.com/attachment.cgi?id=442223&format=raw
    > >
    > > udev/udev-node.c
    > >
    > > + /* set selinux file context on add events */
    > > + if (strcmp(udev_device_get_action(dev), "add") == 0)
    > > + udev_selinux_lsetfilecon(udev, file, mode);
    >
    > I can't access these bugs.
    >
    > Does that makes sense/work for you?
    > http://git.kernel.org/?p=linux/hotplug/udev.git;a=commitdiff;h=326c5fc3ea684825629eccaf33a548759162a539
    >
    > Kay

    I ask Harald (but he wasn't around and I don't know the answer) if it is
    a problem that this changes the behavior of non "add" events.
    Previously a non "add" event with an incorrect mask/uid/gid would have
    reset the SELinux context but now it will not. It fixes the issue at
    hand, my boxes boot with everything labeled nicely, but I'm not sure if
    there is some other corner case that expected the old behavior with
    change events....

    -Eric



    \
     
     \ /
      Last update: 2010-08-31 22:53    [W:2.655 / U:0.148 seconds]
    ©2003-2020 Jasper Spaans|hosted at Digital Ocean and TransIP|Read the blog|Advertise on this site