How should I run genfscon in my module?

Stephen Smalley sds at tycho.nsa.gov
Tue Oct 31 17:49:35 UTC 2006


On Sun, 2006-10-29 at 21:06 +0100, Dawid Gajownik wrote:
> Dnia 10/29/2006 06:33 PM, Użytkownik Joshua Brindle napisał:
> > Right, that's a hard fix I think, dashes aren't allowed in
> > identifiers and they are treated specially for use in MLS ranges..
> 
> Oh, that's really bad :( Without that line files on ntfs-3g filesystem 
> have unlabeled_t type and I would need to give to many privileges to 
> mount_t domain.
> 
> So there is no hope to fix it in the clean way?

File it as a bug against checkpolicy.  

> > Why are they putting a dash in a filesystem name anyway?
> 
> I don't know -- I'm not the creator of ntfs-3g ;-)
> 
-- 
Stephen Smalley
National Security Agency




More information about the selinux mailing list