Re: [Non-DoD Source] Re: [PATCH v3 15/15] selinux: delay sid population for rootfs till init is complete

2018-03-20 Thread Stephen Smalley
On 03/10/2018 10:08 PM, Victor Kamensky wrote: > > > On Tue, 20 Feb 2018, Stephen Smalley wrote: > >> On Fri, 2018-02-16 at 20:33 +, Taras Kondratiuk wrote: >>> From: Victor Kamensky >>> >>> With initramfs cpio format that supports extended attributes >>> we need to skip sid population on s

Re: [PATCH v3 15/15] selinux: delay sid population for rootfs till init is complete

2018-03-10 Thread Victor Kamensky
On Tue, 20 Feb 2018, Stephen Smalley wrote: On Fri, 2018-02-16 at 20:33 +, Taras Kondratiuk wrote: From: Victor Kamensky With initramfs cpio format that supports extended attributes we need to skip sid population on sys_lsetxattr call from initramfs for rootfs if security server is not

Re: [PATCH v3 15/15] selinux: delay sid population for rootfs till init is complete

2018-03-07 Thread Victor Kamensky
On Wed, 7 Mar 2018, Rob Landley wrote: On 02/20/2018 12:56 PM, Stephen Smalley wrote: On Fri, 2018-02-16 at 20:33 +, Taras Kondratiuk wrote: From: Victor Kamensky With initramfs cpio format that supports extended attributes we need to skip sid population on sys_lsetxattr call from init

Re: [PATCH v3 15/15] selinux: delay sid population for rootfs till init is complete

2018-03-07 Thread Rob Landley
On 02/20/2018 12:56 PM, Stephen Smalley wrote: > On Fri, 2018-02-16 at 20:33 +, Taras Kondratiuk wrote: >> From: Victor Kamensky >> >> With initramfs cpio format that supports extended attributes >> we need to skip sid population on sys_lsetxattr call from >> initramfs for rootfs if security s

Re: [PATCH v3 15/15] selinux: delay sid population for rootfs till init is complete

2018-02-20 Thread Stephen Smalley
On Fri, 2018-02-16 at 20:33 +, Taras Kondratiuk wrote: > From: Victor Kamensky > > With initramfs cpio format that supports extended attributes > we need to skip sid population on sys_lsetxattr call from > initramfs for rootfs if security server is not initialized yet. > > Otherwise callback

[PATCH v3 15/15] selinux: delay sid population for rootfs till init is complete

2018-02-16 Thread Taras Kondratiuk
From: Victor Kamensky With initramfs cpio format that supports extended attributes we need to skip sid population on sys_lsetxattr call from initramfs for rootfs if security server is not initialized yet. Otherwise callback in selinux_inode_post_setxattr will try to translate give security.selin