Re: [PATCH 3/3] Enable security.selinux in user namespaces

2017-06-23 Thread Stefan Berger
On 06/23/2017 04:30 PM, Stephen Smalley wrote: On Thu, 2017-06-22 at 14:59 -0400, Stefan Berger wrote: Before the current modifications, SELinux extended attributes were visible inside the user namespace but changes in patch 1 hid them. This patch enables security.selinux in user namespaces and

Re: [PATCH 3/3] Enable security.selinux in user namespaces

2017-06-23 Thread Stefan Berger
On 06/23/2017 04:30 PM, Stephen Smalley wrote: On Thu, 2017-06-22 at 14:59 -0400, Stefan Berger wrote: Before the current modifications, SELinux extended attributes were visible inside the user namespace but changes in patch 1 hid them. This patch enables security.selinux in user namespaces and

Re: [PATCH 3/3] Enable security.selinux in user namespaces

2017-06-23 Thread Stephen Smalley
On Thu, 2017-06-22 at 14:59 -0400, Stefan Berger wrote: > Before the current modifications, SELinux extended attributes were > visible inside the user namespace but changes in patch 1 hid them. > This patch enables security.selinux in user namespaces and allows > them to be written to in the same

Re: [PATCH 3/3] Enable security.selinux in user namespaces

2017-06-23 Thread Stephen Smalley
On Thu, 2017-06-22 at 14:59 -0400, Stefan Berger wrote: > Before the current modifications, SELinux extended attributes were > visible inside the user namespace but changes in patch 1 hid them. > This patch enables security.selinux in user namespaces and allows > them to be written to in the same

[PATCH 3/3] Enable security.selinux in user namespaces

2017-06-22 Thread Stefan Berger
Before the current modifications, SELinux extended attributes were visible inside the user namespace but changes in patch 1 hid them. This patch enables security.selinux in user namespaces and allows them to be written to in the same way as security.capability. Signed-off-by: Stefan Berger

[PATCH 3/3] Enable security.selinux in user namespaces

2017-06-22 Thread Stefan Berger
Before the current modifications, SELinux extended attributes were visible inside the user namespace but changes in patch 1 hid them. This patch enables security.selinux in user namespaces and allows them to be written to in the same way as security.capability. Signed-off-by: Stefan Berger ---