]> www.infradead.org Git - users/jedix/linux-maple.git/commit
selinux: enable setting security context in cgroup
authorAlexey Kodanev <alexey.kodanev@oracle.com>
Wed, 26 Aug 2015 18:56:55 +0000 (11:56 -0700)
committerSantosh Shilimkar <santosh.shilimkar@oracle.com>
Wed, 26 Aug 2015 18:56:55 +0000 (11:56 -0700)
commitda474c119e750c2901c01692e44da2f84e38c26c
tree244740f3bbd60ca18566662f562275548faea481
parent254a2feb4e66b3a75eb824078a984a511271f862
selinux: enable setting security context in cgroup

Orabug: 21295765

cgroup uses kernfs that has 'security.*' setxattr handler. But setxattr
with 'security.selinux' name returns EOPNOTSUPP, i.e. SBLABEL_MNT
not set on the cgroup filesystem.

Fix it by adding 'cgroup' type to genfs special handling list.

Signed-off-by: Alexey Kodanev <alexey.kodanev@oracle.com>
Acked-by: Stephen Smalley <sds@tycho.nsa.gov>
Signed-off-by: Guangyu Sun <guangyu.sun@oracle.com>
Signed-off-by: Santosh Shilimkar <santosh.shilimkar@oracle.com>
security/selinux/hooks.c