Skip to content
Snippets Groups Projects
Select Git revision
  • b300765095d05ecb40e23b262183dab6756810f0
  • master default protected
  • android-7.1.2_r28_klist
  • pie-cts-release
  • pie-vts-release
  • pie-cts-dev
  • oreo-mr1-iot-release
  • sdk-release
  • oreo-m6-s4-release
  • oreo-m4-s12-release
  • pie-release
  • pie-r2-release
  • pie-r2-s1-release
  • oreo-vts-release
  • oreo-cts-release
  • oreo-dev
  • oreo-mr1-dev
  • pie-gsi
  • pie-platform-release
  • pie-dev
  • oreo-cts-dev
  • android-o-mr1-iot-release-1.0.4
  • android-9.0.0_r8
  • android-9.0.0_r7
  • android-9.0.0_r6
  • android-9.0.0_r5
  • android-8.1.0_r46
  • android-8.1.0_r45
  • android-n-iot-release-smart-display-r2
  • android-vts-8.1_r5
  • android-cts-8.1_r8
  • android-cts-8.0_r12
  • android-cts-7.1_r20
  • android-cts-7.0_r24
  • android-o-mr1-iot-release-1.0.3
  • android-cts-9.0_r1
  • android-8.1.0_r43
  • android-8.1.0_r42
  • android-n-iot-release-smart-display
  • android-p-preview-5
  • android-9.0.0_r3
41 results

fs_use

Blame
    • William Roberts's avatar
      dc107236
      Support for ocontexts per device. · dc107236
      William Roberts authored
      ocontexts was split up into 4 files:
      1.fs_use
      2.genfs_contexts
      3.initial_sid_contexts
      4.port_contexts
      
      Each file has their respective declerations in them.
      Devices, in their respective device directory, can now specify sepolicy.fs_use, sepolicy.genfs_contexts, sepolicy.port_contexts, and sepolicy.initial_sid_contexts. These declerations will be added right behind their respective sepolicy counterparts in the concatenated configuration file.
      dc107236
      History
      Support for ocontexts per device.
      William Roberts authored
      ocontexts was split up into 4 files:
      1.fs_use
      2.genfs_contexts
      3.initial_sid_contexts
      4.port_contexts
      
      Each file has their respective declerations in them.
      Devices, in their respective device directory, can now specify sepolicy.fs_use, sepolicy.genfs_contexts, sepolicy.port_contexts, and sepolicy.initial_sid_contexts. These declerations will be added right behind their respective sepolicy counterparts in the concatenated configuration file.
    fs_use 775 B
    # Label inodes via getxattr.
    fs_use_xattr yaffs2 u:object_r:labeledfs:s0;
    fs_use_xattr jffs2 u:object_r:labeledfs:s0;
    fs_use_xattr ext2 u:object_r:labeledfs:s0;
    fs_use_xattr ext3 u:object_r:labeledfs:s0;
    fs_use_xattr ext4 u:object_r:labeledfs:s0;
    fs_use_xattr xfs u:object_r:labeledfs:s0;
    fs_use_xattr btrfs u:object_r:labeledfs:s0;
    
    # Label inodes from task label.
    fs_use_task pipefs u:object_r:pipefs:s0;
    fs_use_task sockfs u:object_r:sockfs:s0;
    
    # Label inodes from combination of task label and fs label.
    # Define type_transition rules if you want per-domain types.
    fs_use_trans devpts u:object_r:devpts:s0;
    fs_use_trans tmpfs u:object_r:tmpfs:s0;
    fs_use_trans devtmpfs u:object_r:device:s0;
    fs_use_trans shm u:object_r:shm:s0;
    fs_use_trans mqueue u:object_r:mqueue:s0;