[refpolicy] kernel_storage.patch

Christopher J. PeBenito cpebenito at tresys.com
Thu Mar 5 12:18:18 CST 2009


On Thu, 2009-03-05 at 12:28 -0500, Daniel J Walsh wrote:
> Christopher J. PeBenito wrote:
> > On Wed, 2009-03-04 at 16:33 -0500, Daniel J Walsh wrote:
> >> http://people.fedoraproject.org/~dwalsh/SELinux/F11/kernel_storage.patch
> >>
> >> Additonal file context
> >>
> >> Allow management of fixed_disk_device_t chr_file
> > 
> > Are you sure about the MLS change of the FUSE device to system low, from
> > system high?
> > 
> > Otherwise merged.
> > 
> fuse file systems are mounted on users home directories by default in
> F10/F11 so a MLS login as a user will only work if this is SystemLow.

Can you describe more fully what the scenario is?  I'm having trouble
seeing where the MLS issue is.  It seems like mount should be able to
handle this fine.

-- 
Chris PeBenito
Tresys Technology, LLC
(410) 290-1411 x150



More information about the refpolicy mailing list