| commit | 901ef845fa2469c211ce3b1e955d9e7245ab5d50 | [log] [tgz] |
|---|---|---|
| author | Antonio Murdaca <runcom@redhat.com> | Thu Feb 09 17:02:42 2017 +0100 |
| committer | Paul Moore <paul@paul-moore.com> | Tue Aug 22 15:38:18 2017 -0400 |
| tree | b09c7e1bb1705c4db7dd5468b19fb7f243aa37b6 | |
| parent | 5d72801538eb59cfd9ca25d00aa439cfbc02ac9a [diff] |
selinux: allow per-file labeling for cgroupfs This patch allows genfscon per-file labeling for cgroupfs. For instance, this allows to label the "release_agent" file within each cgroup mount and limit writes to it. Signed-off-by: Antonio Murdaca <amurdaca@redhat.com> [PM: subject line and merge tweaks] Signed-off-by: Paul Moore <paul@paul-moore.com>