selinux January 2011 archive
Main Archive Page > Month Archives  > selinux archives
selinux: Re: [PATCH 2/2] RFC: selinux: sysctl: fix selinux label

Re: [PATCH 2/2] RFC: selinux: sysctl: fix selinux labeling broken by last patch

From: Lucian Adrian Grijincu <lucian.grijincu_at_nospam>
Date: Mon Jan 31 2011 - 17:03:49 GMT
To: Stephen Smalley <>

On Mon, Jan 31, 2011 at 6:59 PM, Stephen Smalley <> wrote:
> /proc/sys inode labeling was disabled earlier (hence marked S_PRIVATE)
> when /proc/sys was reimplemented by Eric, so all access control
> on /proc/sys was switched to using the sysctl hook rather than the
> inode-based checking.  That's why you don't get a result from ls -Z
> on /proc/sys on current kernels.  Getting actual labeling working again
> for those inodes would be a win, so your patch is an improvement in that
> regard for selinux.

Oh, OK. Thanks for letting me know.

Do you see anything else that is wrong with these patches (apart from

--  . ..: Lucian -- This message was distributed to subscribers of the selinux mailing list. If you no longer wish to subscribe, send mail to with the words "unsubscribe selinux" without quotes as the message.