• Mimi Zohar's avatar
    evm: labeling pseudo filesystems exception · 5101a185
    Mimi Zohar authored
    To prevent offline stripping of existing file xattrs and relabeling of
    them at runtime, EVM allows only newly created files to be labeled.  As
    pseudo filesystems are not persistent, stripping of xattrs is not a
    concern.
    
    Some LSMs defer file labeling on pseudo filesystems.  This patch
    permits the labeling of existing files on pseudo files systems.
    Signed-off-by: default avatarMimi Zohar <zohar@linux.vnet.ibm.com>
    5101a185
evm_main.c 13.7 KB