| commit | 5101a1850bb7ccbf107929dee9af0cd2f400940f | [log] [tgz] |
|---|---|---|
| author | Mimi Zohar <zohar@linux.vnet.ibm.com> | Tue Apr 21 13:59:31 2015 -0400 |
| committer | Mimi Zohar <zohar@linux.vnet.ibm.com> | Thu May 21 13:28:47 2015 -0400 |
| tree | 5ef7ac633c626864273b091ffe6b180e5b92297f | |
| parent | a18d0cbfabd1d17e11ec2ae54804284298462125 [diff] |
evm: labeling pseudo filesystems exception To prevent offline stripping of existing file xattrs and relabeling of them at runtime, EVM allows only newly created files to be labeled. As pseudo filesystems are not persistent, stripping of xattrs is not a concern. Some LSMs defer file labeling on pseudo filesystems. This patch permits the labeling of existing files on pseudo files systems. Signed-off-by: Mimi Zohar <zohar@linux.vnet.ibm.com>