https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=134111
We are having some discussions of ReiserFS in the Red Hat bugzilla.
fs_use_xattr reiserfs system_u:object_r:fs_t;
It seems to me that the easiest solution is to remove the above line from fs_use and add the following to genfs_contexts:
genfscon reiserfs / system_u:object_r:nfs_t
The reason for this hack is that we already have the policy for home directories on NFS. ReiserFS will never work for a root FS and isn't worth any more effort than this hack.
Another suggestion was to entirely remove ReiserFS support from Fedora (IE no reiserfs.ko file in the kernel package).
On Thu, 30 Sep 2004 05:12, Russell Coker russell@coker.com.au wrote:
https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=134111
We are having some discussions of ReiserFS in the Red Hat bugzilla.
fs_use_xattr reiserfs system_u:object_r:fs_t;
It seems to me that the easiest solution is to remove the above line from fs_use and add the following to genfs_contexts:
genfscon reiserfs / system_u:object_r:nfs_t
allow mount_t unlabeled_t:dir search;
I almost forgot to mention that mount_t needs search access to a directory of type unlabeled_t for the above hack to work. Not sure why, but it's fairly harmless.
On Wed, 2004-09-29 at 15:12, Russell Coker wrote:
https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=134111
We are having some discussions of ReiserFS in the Red Hat bugzilla.
fs_use_xattr reiserfs system_u:object_r:fs_t;
It seems to me that the easiest solution is to remove the above line from fs_use and add the following to genfs_contexts:
genfscon reiserfs / system_u:object_r:nfs_t
The reason for this hack is that we already have the policy for home directories on NFS. ReiserFS will never work for a root FS and isn't worth any more effort than this hack.
This seems reasonable, at least until someone chooses to pursue the necessary patches to the reiserfs xattr support to allow proper interaction with SELinux.
selinux@lists.fedoraproject.org
-
Russell Coker -
Stephen Smalley