bcachefs icon indicating copy to clipboard operation
bcachefs copied to clipboard

Initial support for security callbacks.

Open xbjfk opened this issue 1 year ago • 2 comments

I decided to take a stab at SELinux support - which should fix #642. Note that this must be accompanied with a change in distro SELinux policies to add bcachefs as a supported filesystem, otherwise setting attributes will still fail. This patch simply ensures that the security callbacks will be run when a new inode is created.

I am relatively knew to kernel and filesystem code as a whole, so there may be glaring (or subtle) issues, but ephemeral testing has shown that this works on my machine™.

xbjfk avatar Mar 30 '24 10:03 xbjfk

sir this is a issue has been verified and running the process in two to three days

Sangeetajain09 avatar Apr 07 '24 17:04 Sangeetajain09

I decided to take a stab at SELinux support - which should fix #642. Note that this must be accompanied with a change in distro SELinux policies to add bcachefs as a supported filesystem, otherwise setting attributes will still fail. This patch simply ensures that the security callbacks will be run when a new inode is created.

I am relatively knew to kernel and filesystem code as a whole, so there may be glaring (or subtle) issues, but ephemeral testing has shown that this works on my machine™.

Only patch filesystem.te is not enough, Makefile and devices.fc also need be patched. I made a patch here

benstonezhang avatar Sep 05 '24 06:09 benstonezhang