diff options
| author |   Christian Göttsche <cgzones@googlemail.com> | 2024-02-22 18:00:48 +0100 |
|---|---|---|
| committer |   Kenton Groombridge <concord@gentoo.org> | 2024-03-01 12:05:52 -0500 |
| commit | 5c8203bfd90758d92cd93c786de8fe94e6d716ca (patch) | |
| tree | 9f8afc285436197b92bc8f7165235d3433b096c2 | |
| parent | vnstatd: update (diff) | |
| download | hardened-refpolicy-5c8203bfd90758d92cd93c786de8fe94e6d716ca.tar.gz hardened-refpolicy-5c8203bfd90758d92cd93c786de8fe94e6d716ca.tar.bz2 hardened-refpolicy-5c8203bfd90758d92cd93c786de8fe94e6d716ca.zip | |
fs: add support for virtiofs
Adopted from https://github.com/fedora-selinux/selinux-policy/commit/5580e9a576f759820dbc3387961ce58a959221dc
Signed-off-by: Christian Göttsche <cgzones@googlemail.com>
Signed-off-by: Kenton Groombridge <concord@gentoo.org>
| -rw-r--r-- | policy/modules/kernel/filesystem.te | 11 |
1 files changed, 11 insertions, 0 deletions
diff --git a/policy/modules/kernel/filesystem.te b/policy/modules/kernel/filesystem.te index f21fc71e9..f9aa5f90b 100644 --- a/policy/modules/kernel/filesystem.te +++ b/policy/modules/kernel/filesystem.te @@ -41,6 +41,7 @@ fs_use_xattr lustre gen_context(system_u:object_r:fs_t,s0); fs_use_xattr overlay gen_context(system_u:object_r:fs_t,s0); fs_use_xattr squashfs gen_context(system_u:object_r:fs_t,s0); fs_use_xattr ubifs gen_context(system_u:object_r:fs_t,s0); +fs_use_xattr virtiofs gen_context(system_u:object_r:fs_t,s0); fs_use_xattr xfs gen_context(system_u:object_r:fs_t,s0); fs_use_xattr zfs gen_context(system_u:object_r:fs_t,s0); @@ -203,6 +204,16 @@ optional_policy(` init_mountpoint(tracefs_t) ') + +# +# virtiofs_t is the default type for virtio file systems +# and their files. +# +type virtiofs_t; +fs_noxattr_type(virtiofs_t) +files_mountpoint(virtiofs_t) +genfscon virtiofs / gen_context(system_u:object_r:virtiofs_t,s0) + type vmblock_t; fs_noxattr_type(vmblock_t) files_mountpoint(vmblock_t) |