On Thu, Dec 11, 2008 at 09:41:20PM +1100, James Morris wrote:
> On Fri, 5 Dec 2008, Stephen Smalley wrote:
>
> > I suspect we need the following un-tested diff to map all of these proc/
> > filesystem types to "proc" for the policy lookup at filesystem mount
> > time.
>
> I finally got a bootable linux-next, but it seems that the proc/net patch
> is no longer in there.
>
> Any idea if it's coming back? The patch below looks ok, but it needs
> testing
Yes, please, someone test it.
> (and I'd suggest perhaps including it any future version of the proc/net
> patch).
I placed it into proc-wip branch to not screw testers with SELinux meanwhile
git-remote add proc
git://git.kernel.org/pub/scm/linux/kernel/git/adobriyan/proc.git
> > --- a/security/selinux/hooks.c
> > +++ b/security/selinux/hooks.c
> > @@ -703,7 +703,7 @@ static int selinux_set_mnt_opts(struct super_block *sb,
> > sbsec->proc = 1;
> >
> > /* Determine the labeling behavior to use for this filesystem type. */
> > - rc = security_fs_use(sb->s_type->name, &sbsec->behavior, &sbsec->sid);
> > + rc = security_fs_use(sbsec->proc ? "proc" : sb->s_type->name,
> > &sbsec->behavior, &sbsec->sid);
------------------------------------------------------------------------------
SF.Net email is Sponsored by MIX09, March 18-20, 2009 in Las Vegas, Nevada.
The future of the web can't happen without you. Join us at MIX09 to help
pave the way to the Next Web now. Learn more and register at
http://ad.doubleclick.net/clk;208669438;13503038;i?http://2009.visitmix.com/
_______________________________________________
E1000-devel mailing list
E1000-devel@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/e1000-devel
