On Mon, Apr 02, 2012 at 04:11:24PM -0400, David Quigley wrote:
On 04/02/2012 16:06, Richard W.M. Jones wrote:
>That's not what I said. I said that relatively recent kernels (up to
>the middle of last year) didn't support system.*, and tmpfs doesn't
Sorry, I meant to write security.* there.
>support user.* at all AFAICT.
>
>Rich.
>
>--
>Richard Jones, Virtualization Group, Red Hat
>http://people.redhat.com/~rjones
>virt-top is 'top' for virtual machines. Tiny program with many
>powerful monitoring features, net stats, disk stats, logging, etc.
>http://et.redhat.com/~rjones/virt-top
I wasn't contesting your statement of user.* and system.* I was just
pointing out that tmpfs has supported SELinux labels for a very long
time. Even well before Eric's patch last year that put generic xattr
handlers in. So there should be no issue at all with SELinux labels
on tmpfs even if you run older kernels.
Are you sure about this? '-o seclabel' has been backported to RHEL 6,
but it doesn't exist on RHEL 5, nor on (upstream) 2.6.39 AFAICS.
Rich.
--
Richard Jones, Virtualization Group, Red Hat
http://people.redhat.com/~rjones
New in Fedora 11: Fedora Windows cross-compiler. Compile Windows
programs, test, and build Windows installers. Over 70 libraries supprt'd
http://fedoraproject.org/wiki/MinGW http://www.annexia.org/fedora_mingw