Bug#849637: [DSE-Dev] Bug#849637: /sys/devices/system/cpu/online SELinux context

reassign src:refpolicy 2.20161023.1-2 thanks On Sat, 31 Dec 2016 11:34:38 +0100 cgzones wrote: > Wow! > > Thank you very much, I was completely unaware of this feature. > I did not read any documentation of it on selinuxproject.org or in The > SELinux Notebook v4 about

Bug#849637: [DSE-Dev] Bug#849637: /sys/devices/system/cpu/online SELinux context

Thanks again for your feedback. The statement I was looking for is: genfscon debugfs /tracing gen_context(system_u:object_r:tracefs_t,s0) I added the filecontexts: /sys/kernel/debug/.* gen_context(system_u:object_r:debugfs_t,s0) /sys/kernel/debug/tracing(/.*)?

Bug#849637: [DSE-Dev] Bug#849637: /sys/devices/system/cpu/online SELinux context

On 12/31/2016 12:41 PM, Dominick Grift wrote: > On 12/31/2016 12:38 PM, Dominick Grift wrote: >> On 12/31/2016 11:34 AM, cgzones wrote: >>> Wow! >>> >>> Thank you very much, I was completely unaware of this feature. >>> I did not read any documentation of it on selinuxproject.org or in The >>>

Bug#849637: [DSE-Dev] Bug#849637: /sys/devices/system/cpu/online SELinux context

On 12/31/2016 12:38 PM, Dominick Grift wrote: > On 12/31/2016 11:34 AM, cgzones wrote: >> Wow! >> >> Thank you very much, I was completely unaware of this feature. >> I did not read any documentation of it on selinuxproject.org or in The >> SELinux Notebook v4 about it. >> >> I got it working via

Bug#849637: [DSE-Dev] Bug#849637: /sys/devices/system/cpu/online SELinux context

On 12/31/2016 11:34 AM, cgzones wrote: > Wow! > > Thank you very much, I was completely unaware of this feature. > I did not read any documentation of it on selinuxproject.org or in The > SELinux Notebook v4 about it. > > I got it working via > > genfscon sysfs /devices/system/cpu/online >

Bug#849637: [DSE-Dev] Bug#849637: /sys/devices/system/cpu/online SELinux context

Wow! Thank you very much, I was completely unaware of this feature. I did not read any documentation of it on selinuxproject.org or in The SELinux Notebook v4 about it. I got it working via genfscon sysfs /devices/system/cpu/online gen_context(system_u:object_r:cpu_online_t,s0) at

Bug#849637: [DSE-Dev] Bug#849637: /sys/devices/system/cpu/online SELinux context

On 12/30/2016 10:51 PM, cgzones wrote: > But isn't genfscon with subcontexts only available on the /proc filesystem? If your kernel is not too old, then it also work for sysfs > > 2016-12-30 22:18 GMT+01:00 Dominick Grift : >> On Fri, 30 Dec 2016 12:39:05 +0100 Laurent

Bug#849637: [DSE-Dev] Bug#849637: /sys/devices/system/cpu/online SELinux context

But isn't genfscon with subcontexts only available on the /proc filesystem? 2016-12-30 22:18 GMT+01:00 Dominick Grift : > On Fri, 30 Dec 2016 12:39:05 +0100 Laurent Bigonville > wrote: >> reassign 849637 policycoreutils >> thanks >> >> On Thu, 29 Dec

Bug#849637: /sys/devices/system/cpu/online SELinux context

On Fri, 30 Dec 2016 17:17:24 +0100 cgzones wrote: > Hi, > thanks for your response. > I assigned this bug to systemd, cause I did not know any better and > thought the sysfs filesystem is managed by systemd, like /run. > > Btw, /dev/pts/ptmx is also mislabeled: > >

Bug#849637: /sys/devices/system/cpu/online SELinux context

On Fri, 30 Dec 2016 12:39:05 +0100 Laurent Bigonville wrote: > reassign 849637 policycoreutils > thanks > > On Thu, 29 Dec 2016 12:36:30 +0100 cgzones wrote: > > > When running a SELinux enabled system /sys/devices/system/cpu/online > > is mislabeled

Bug#849637: /sys/devices/system/cpu/online SELinux context

Hi, thanks for your response. I assigned this bug to systemd, cause I did not know any better and thought the sysfs filesystem is managed by systemd, like /run. Btw, /dev/pts/ptmx is also mislabeled: root@debianSE:~# restorecon -vv -R -n /dev Warning no default label for /dev/mqueue Warning no

Bug#849637: /sys/devices/system/cpu/online SELinux context

reassign 849637 policycoreutils thanks On Thu, 29 Dec 2016 12:36:30 +0100 cgzones wrote: > When running a SELinux enabled system /sys/devices/system/cpu/online > is mislabeled after boot: > > root@test1:/root/selinux/policy# restorecon -vv -R -F -n /sys > Would relabel

Bug#849637: /sys/devices/system/cpu/online SELinux context

Package: systemd Version: 232-8 When running a SELinux enabled system /sys/devices/system/cpu/online is mislabeled after boot: root@test1:/root/selinux/policy# restorecon -vv -R -F -n /sys Would relabel /sys/devices/system/cpu/online from system_u:object_r:sysfs_t:s0 to