Skip to main content

Browse the archive

Staging
v0.5.1
https://github.com/torvalds/linux
02 December 2023, 22:23:51 UTC
Revision f5c1d5b2aaf9a98f15a6dcdfbba1f494d0aaae52 authored by James Morris on 28 July 2005, 08:07:37 UTC, committed by Linus Torvalds on 28 July 2005, 15:39:02 UTC 
[PATCH] SELinux: default labeling of MLS field
 
Implement kernel labeling of the MLS (multilevel security) field of
security contexts for files which have no existing MLS field.  This is to
enable upgrades of a system from non-MLS to MLS without performing a full
filesystem relabel including all of the mountpoints, which would be quite
painful for users.

With this patch, with MLS enabled, if a file has no MLS field, the kernel
internally adds an MLS field to the in-core inode (but not to the on-disk
file).  This MLS field added is the default for the superblock, allowing
per-mountpoint control over the values via fixed policy or mount options.

This patch has been tested by enabling MLS without relabeling its
filesystem, and seems to be working correctly.

Signed-off-by: James Morris <jmorris@redhat.com>
Signed-off-by: Stephen Smalley <sds@epoch.ncsc.mil>
Signed-off-by: Andrew Morton <akpm@osdl.org>
Signed-off-by: Linus Torvalds <torvalds@osdl.org>
1 parent e1699f5
History
Tip revision: f5c1d5b2aaf9a98f15a6dcdfbba1f494d0aaae52 authored by James Morris on 28 July 2005, 08:07:37 UTC
[PATCH] SELinux: default labeling of MLS field
Tip revision: f5c1d5b
File Mode Size
Documentation
arch
crypto
drivers
fs
include
init
ipc
kernel
lib
mm
net
scripts
security
sound
usr
COPYING -rw-r--r-- 18.3 KB
CREDITS -rw-r--r-- 87.3 KB
MAINTAINERS -rw-r--r-- 57.1 KB
Makefile -rw-r--r-- 43.4 KB
README -rw-r--r-- 14.2 KB
REPORTING-BUGS -rw-r--r-- 2.9 KB

README

back to top