On Fri, 5 Dec 2008, Stephen Smalley wrote:
> I suspect we need the following un-tested diff to map all of these proc/
> filesystem types to "proc" for the policy lookup at filesystem mount
> time.
I finally got a bootable linux-next, but it seems that the proc/net patch
is no longer in there.
Any idea if it's coming back? The patch below looks ok, but it needs
testing (and I'd suggest perhaps including it any future version of the
proc/net patch).
> diff --git a/security/selinux/hooks.c b/security/selinux/hooks.c
> index 9155fa9..3c3ceb7 100644
> --- a/security/selinux/hooks.c
> +++ b/security/selinux/hooks.c
> @@ -703,7 +703,7 @@ static int selinux_set_mnt_opts(struct super_block *sb,
> sbsec->proc = 1;
>
> /* Determine the labeling behavior to use for this filesystem type. */
> - rc = security_fs_use(sb->s_type->name, &sbsec->behavior, &sbsec->sid);
> + rc = security_fs_use(sbsec->proc ? "proc" : sb->s_type->name,
> &sbsec->behavior, &sbsec->sid);
> if (rc) {
> printk(KERN_WARNING "%s: security_fs_use(%s) returned %d\n",
> __func__, sb->s_type->name, rc);
>
> --
> Stephen Smalley
> National Security Agency
>
--
James Morris
<[EMAIL PROTECTED]>
------------------------------------------------------------------------------
SF.Net email is Sponsored by MIX09, March 18-20, 2009 in Las Vegas, Nevada.
The future of the web can't happen without you. Join us at MIX09 to help
pave the way to the Next Web now. Learn more and register at
http://ad.doubleclick.net/clk;208669438;13503038;i?http://2009.visitmix.com/
_______________________________________________
E1000-devel mailing list
E1000-devel@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/e1000-devel
