[DSE-Dev] Bug#849637: Bug#849637: /sys/devices/system/cpu/online SELinux context

Laurent Bigonville bigon at debian.org
Tue Jan 3 07:52:18 UTC 2017


reassign src:refpolicy 2.20161023.1-2
thanks

On Sat, 31 Dec 2016 11:34:38 +0100 cgzones <cgzones at googlemail.com> wrote:
 > Wow!
 >
 > Thank you very much, I was completely unaware of this feature.
 > I did not read any documentation of it on selinuxproject.org or in The
 > SELinux Notebook v4 about it.
 >
 > I got it working via
 >
 > genfscon sysfs /devices/system/cpu/online
 > gen_context(system_u:object_r:cpu_online_t,s0)
 >
 > at 
https://github.com/cgzones/debian-package-refpolicy/commit/3ba127468436334275398a824260383208ee58b1

Could you please try to get this patch merged upstream?

[...]
 > I think otherwise this bug can be reassigned to refpolicy.

Yes I also feels it's cleaner than relabeling at boot.



More information about the SELinux-devel mailing list