Re: [Non-DoD Source] Re: [PATCH v3 14/15] selinux: allow setxattr on rootfs so initramfs code can set them

2018-03-20 Thread Stephen Smalley
On 03/10/2018 10:07 PM, Victor Kamensky wrote: > > > On Tue, 20 Feb 2018, Stephen Smalley wrote: > >> On Fri, 2018-02-16 at 20:33 +, Taras Kondratiuk wrote: >>> From: Victor Kamensky >>> >>> initramfs code supporting extended cpio format have ability to >>> fill extended attributes from cpi

Re: [PATCH v3 14/15] selinux: allow setxattr on rootfs so initramfs code can set them

2018-03-10 Thread Victor Kamensky
On Tue, 20 Feb 2018, Stephen Smalley wrote: On Fri, 2018-02-16 at 20:33 +, Taras Kondratiuk wrote: From: Victor Kamensky initramfs code supporting extended cpio format have ability to fill extended attributes from cpio archive, but if SELinux enabled and security server is not initializ

Re: [PATCH v3 14/15] selinux: allow setxattr on rootfs so initramfs code can set them

2018-02-20 Thread Stephen Smalley
On Fri, 2018-02-16 at 20:33 +, Taras Kondratiuk wrote: > From: Victor Kamensky > > initramfs code supporting extended cpio format have ability to > fill extended attributes from cpio archive, but if SELinux enabled > and security server is not initialized yet, selinux callback would > refuse

[PATCH v3 14/15] selinux: allow setxattr on rootfs so initramfs code can set them

2018-02-16 Thread Taras Kondratiuk
From: Victor Kamensky initramfs code supporting extended cpio format have ability to fill extended attributes from cpio archive, but if SELinux enabled and security server is not initialized yet, selinux callback would refuse setxattr made by initramfs code. Solution enable SBLABEL_MNT on rootfs