/dev/shm - tmpfs_t or device_t ?

[Ken YANG]

Tom London wrote:
> Running latest Rawhide, targeted/enforcing.
> 
> I notice that if I run 'restorecon -v -R -n /dev' I get:
> [root at localhost ~]# restorecon -v -R -n /dev
> restorecon reset /dev/shm context
> system_u:object_r:tmpfs_t:s0->system_u:object_r:device_t:s0
> [root at localhost ~]#
> 
> but
> [root at localhost ~]# ls -ldZ /dev/shm
> drwxrwxrwt  root root system_u:object_r:tmpfs_t        /dev/shm
> [root at localhost ~]#
> 
> Seems funny to me....  Is that right?

i found your resorecon command run with "-n", that option means:

-n     don't change any file labels.

additionally, i found there are not any label in file_contexts,
so i think if there no type_transition rules in policy, the file
label should be inherited from his containing dir, i.e. device_t


> 
> tom