Re: [PATCH] security: selinux: allow changing labels for cgroupfs

2017-02-02 Thread Antonio Murdaca
On Thu, Feb 2, 2017 at 4:01 PM, Gary Tierney wrote: > On Thu, Feb 02, 2017 at 03:42:28PM +0100, Antonio Murdaca wrote: >> This patch allows changing labels for cgroup mounts. Previously, running >> chcon on cgroupfs would throw an "Operation not supported". This patch >> specifically whitelist cgr

Re: [PATCH] security: selinux: allow changing labels for cgroupfs

2017-02-02 Thread Gary Tierney
On Thu, Feb 02, 2017 at 03:42:28PM +0100, Antonio Murdaca wrote: > This patch allows changing labels for cgroup mounts. Previously, running > chcon on cgroupfs would throw an "Operation not supported". This patch > specifically whitelist cgroupfs. > > The patch could also allow containers to write

[PATCH] security: selinux: allow changing labels for cgroupfs

2017-02-02 Thread Antonio Murdaca
This patch allows changing labels for cgroup mounts. Previously, running chcon on cgroupfs would throw an "Operation not supported". This patch specifically whitelist cgroupfs. The patch could also allow containers to write only to the systemd cgroup for instance, while the other cgroups are kept