6 Jan
2023
6 Jan
'23
2:02 p.m.
On Thu, Jan 05, 2023 at 05:30:20PM +0100, Peter Krempa wrote:
Unfortunately unlike with DAC we can't simply ignore labelling for the FD and it also influences the on-disk state.
Thus we need to relabel the FD and we also store the existing label in cases when the user will request best-effort label replacement.
Signed-off-by: Peter Krempa <pkrempa@redhat.com> --- src/conf/storage_source_conf.c | 1 + src/conf/storage_source_conf.h | 3 +++ src/security/security_selinux.c | 32 +++++++++++++++++++++++++++++++- 3 files changed, 35 insertions(+), 1 deletion(-)
Reviewed-by: Pavel Hrdina <phrdina@redhat.com>